adding new hashicorp logos, adding waypoint, adding boundary

Author: Riaan Nolan

.gitignore

@@ -6,6 +6,7 @@
 **.tfstate
 **.backup
 **.rli
+**.lock**
 sonarqube/logs**
 sonarqube/data/es6**
 sonarqube/data/sonar.lock.db

README.md

@@ -48,6 +48,8 @@ This repository is designed to provide you with a stack that demonstrates the po
 * [__Terraform__](hashicorp/#terraform) - Use Infrastructure as Code to provision and manage any cloud, infrastructure, or service
 * [__Packer__](hashicorp/#packer) - Build Automated Machine Images
 * [__Sentinel__](hashicorp/#sentinel) - Sentinel is an embedded policy-as-code framework
+* [__Waypoint__](hashicorp/#waypoint) - Waypoint is an open source solution that provides a modern workflow for build, deploy, and release across platforms
+* [__Boundary__](hashicorp/#boundary) - Simple and secure remote access to any system from anywhere based on user identity.
 * [__Fabio__](hashicorp/#fabio-load-balancer) - Fabio is an HTTP and TCP reverse proxy that configures itself with data from Consul
 * [__Docker__](docker/#docker) - Securely build, share and run any application, anywhere
 * [__Localstack__](localstack/#localstack) - A fully functional local AWS cloud stack
@@ -98,8 +100,11 @@ Lead Automation Architect [riaan.nolan@servian.com](mailto:riaan.nolan@servian.c
 
 ## Contributors and Special mentions
 A Very special mention to HashiQube's contributors, Thank You All for your help, suggestions and contributions no matter how small <3
+ - Thomas Cockin
  - Konstantin Vanyushov
  - Tristan Morgan
+ - Ringo Chan
+ - Ehsan Mirzaei
 
 ## License
 HashiQube is available as open-source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

SUMMARY.md

@@ -1,6 +1,5 @@
 * [Home](README.md)
 
-  * [Multi Cloud](multi-cloud/README.md)
   * [Database](database/README.md)
   * [Docker](docker/README.md)
   * [Docsify](docsify/README.md)
@@ -9,3 +8,4 @@
   * [Jenkins](jenkins/README.md)
   * [Ldap](ldap/README.md)
   * [Localstack](localstack/README.md)
+  * [Multi-cloud](multi-cloud/README.md)

Vagrantfile

@@ -88,6 +88,8 @@ Vagrant::configure("2") do |config|
       if machines.size == 1 # only expose these ports if 1 machine, else conflicts
         config.vm.network "forwarded_port", guest: 8200, host: 8200 # vault
         config.vm.network "forwarded_port", guest: 4646, host: 4646 # nomad
+        config.vm.network "forwarded_port", guest: 9702, host: 9702 # waypoint
+        config.vm.network "forwarded_port", guest: 19200, host: 19200 # boundary
         config.vm.network "forwarded_port", guest: 8500, host: 8500 # consul
         config.vm.network "forwarded_port", guest: 8600, host: 8600, protocol: 'udp' # consul dns
         config.vm.network "forwarded_port", guest: 8800, host: 8800 # terraform-enterprise
@@ -200,6 +202,14 @@ Vagrant::configure("2") do |config|
       # vagrant up --provision-with nomad to only run this on vagrant up
       config.vm.provision "nomad", type: "shell", preserve_order: true, privileged: true, path: "hashicorp/nomad.sh"
 
+      # install waypoint
+      # vagrant up --provision-with waypoint to only run this on vagrant up
+      config.vm.provision "waypoint", type: "shell", preserve_order: true, privileged: true, path: "hashicorp/waypoint.sh"
+
+      # install boundary
+      # vagrant up --provision-with boundary to only run this on vagrant up
+      config.vm.provision "boundary", type: "shell", preserve_order: true, privileged: true, path: "hashicorp/boundary.sh"
+
       # install packer
       # vagrant up --provision-with packer to only run this on vagrant up
       config.vm.provision "packer", type: "shell", preserve_order: true, privileged: true, path: "hashicorp/packer.sh"

hashicorp/README.md

@@ -0,0 +1,41 @@
+#!/bin/bash
+# https://learn.hashicorp.com/tutorials/boundary/getting-started-install
+# https://learn.hashicorp.com/tutorials/boundary/getting-started-dev
+
+function boundary-install() {
+  sudo DEBIAN_FRONTEND=noninteractive apt-get --assume-yes install curl unzip jq
+  yes | sudo docker system prune -a
+  yes | sudo docker system prune --volumes
+  # check if waypoint is installed, start and exit
+  if [ -f /usr/local/bin/boundary ]; then
+    echo -e '\e[38;5;198m'"++++ Bundary already installed at /usr/local/bin/boundary"
+    echo -e '\e[38;5;198m'"++++ `/usr/local/bin/boundary version`"
+  else
+  # if boundary is not installed, download and install
+    echo -e '\e[38;5;198m'"++++ Boundary not installed, installing.."
+    LATEST_URL=$(curl -sL https://releases.hashicorp.com/boundary/index.json | jq -r '.versions[].builds[].url' | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n | egrep -v 'rc|beta' | egrep 'linux.*amd64' | sort -V | tail -n 1)
+    wget -q $LATEST_URL -O /tmp/boundary.zip
+    mkdir -p /usr/local/bin
+    (cd /usr/local/bin && unzip /tmp/boundary.zip)
+    echo -e '\e[38;5;198m'"++++ Installed `/usr/local/bin/boundary version`"
+  fi
+  mkdir -p /etc/boundary
+  cat <<EOF | sudo tee /etc/boundary/server.conf
+listener "tcp" {
+  purpose = "api"
+  address = "0.0.0.0:19200"
+}
+EOF
+  echo -e '\e[38;5;198m'"++++ Starting Boundary in dev mode"
+  pkill boundary
+  sleep 10
+  pkill boundary
+  nohup boundary dev -api-listen-address 0.0.0.0:19200 > /var/log/boundary.log 2>&1 &
+  sh -c 'sudo tail -f /var/log/boundary.log | { sed "/worker successfully authed/ q" && kill $$ ;}'
+  echo -e '\e[38;5;198m'"++++ Boundary Server started at http://localhost:19200"
+  echo -e '\e[38;5;198m'"++++ Login with admin:password"
+  # TODO: read token and test login
+  # boundary authenticate password -login-name=admin -password password -auth-method-id=ampw_1234567890 -addr=http://127.0.0.1:19200
+}
+
+boundary-install

hashicorp/boundary.sh

@@ -9,4 +9,4 @@
         owner: root
     - name: Return all kv v2 secrets from a path
       debug:
-        msg: "{{ lookup('hashi_vault', 'secret=kv/ansible token=s.VJmrgSE5oGsmxJ9YhHzTEYi6 url=http://localhost:8200') }}"
+        msg: "{{ lookup('hashi_vault', 'secret=kv/ansible token=s.3Z4JPOS0Wm1wsml7M9jRNq2W url=http://localhost:8200') }}"

hashicorp/images/boundary-how-it-works.png

@@ -0,0 +1,68 @@
+#!/bin/bash
+# https://www.waypointproject.io/docs/getting-started
+# https://learn.hashicorp.com/tutorials/waypoint/get-started-nomad?in=waypoint/get-started-nomad
+
+function waypoint-install() {
+  sudo DEBIAN_FRONTEND=noninteractive apt-get --assume-yes install curl unzip jq
+  yes | sudo docker system prune -a
+  yes | sudo docker system prune --volumes
+  # check if waypoint is installed, start and exit
+  if [ -f /usr/local/bin/waypoint ]; then
+    echo -e '\e[38;5;198m'"++++ Waypoint already installed at /usr/local/bin/waypoint"
+    echo -e '\e[38;5;198m'"++++ `/usr/local/bin/waypoint version`"
+  else
+  # if waypoint is not installed, download and install
+    echo -e '\e[38;5;198m'"++++ Waypoint not installed, installing.."
+    LATEST_URL=$(curl -sL https://releases.hashicorp.com/waypoint/index.json | jq -r '.versions[].builds[].url' | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n | egrep -v 'rc|beta' | egrep 'linux.*amd64' | sort -V | tail -n 1)
+    wget -q $LATEST_URL -O /tmp/waypoint.zip
+    mkdir -p /usr/local/bin
+    (cd /usr/local/bin && unzip /tmp/waypoint.zip)
+    echo -e '\e[38;5;198m'"++++ Installed `/usr/local/bin/waypoint version`"
+  fi
+  echo -e '\e[38;5;198m'"++++ Docker pull Waypoint Server container"
+  docker pull hashicorp/waypoint:latest
+  docker stop waypoint-server
+  docker rm waypoint-server
+  echo -e '\e[38;5;198m'"++++ Waypoint Server starting"
+  export NOMAD_ADDR='http://localhost:4646'
+  waypoint install -platform=nomad -nomad-dc=dc1 -accept-tos
+  nomad status
+  echo -e '\e[38;5;198m'"++++ Git Clone Waypoint examples"
+  rm -rf /vagrant/hashicorp/waypoint/examples
+  mkdir -p /vagrant/hashicorp/waypoint
+  git clone https://github.com/hashicorp/waypoint-examples.git /vagrant/hashicorp/waypoint/examples
+  cd /vagrant/hashicorp/waypoint/examples/docker/nodejs
+  sed -i '/<\/h1>/a <p>The files are located in \/vagrant\/hashicorp\/waypoint\/examples\/docker\/nodejs, and this file is views/pages/index.ejs<\/p>' /vagrant/hashicorp/waypoint/examples/docker/nodejs/views/pages/index.ejs
+  echo -e '\e[38;5;198m'"++++ Write /vagrant/hashicorp/waypoint/examples/docker/nodejs/waypoint.hcl"
+  rm -rf /vagrant/hashicorp/waypoint/examples/docker/nodejs/waypoint.hcl
+  cat <<EOF | sudo tee /vagrant/hashicorp/waypoint/examples/docker/nodejs/waypoint.hcl
+project = "example-nodejs"
+app "example-nodejs" {
+  build {
+    use "pack" {}
+    registry {
+      use "docker" {
+        image = "nodejs-example"
+        tag = "1"
+        local = true
+      }
+    }
+  }
+  deploy {
+    use "nomad" {
+      datacenter = "dc1"
+    }
+  }
+}
+EOF
+  echo -e '\e[38;5;198m'"++++ Stop the Nodejs example job if running"
+  nomad job stop $(nomad job status | grep running | grep example | cut -d ' ' -f1)
+  waypoint init
+  waypoint up
+  echo -e '\e[38;5;198m'"++++ Waypoint Server https://10.9.99.10:9702 and enter the following Token displayed below"
+  sudo waypoint token new
+  echo -e '\e[38;5;198m'"++++ Nomad http://localhost:4646"
+
+}
+
+waypoint-install

hashicorp/images/boundary-logged-in-page.png

@@ -0,0 +1,16 @@
+# Node build artifacts
+node_modules
+npm-debug.log
+
+# Local development
+*.env
+*.dev
+.DS_Store
+
+# Docker
+Dockerfile
+docker-compose.yml
+
+# Nomad
+*.db
+*.lock

hashicorp/images/boundary-login-page.png

@@ -0,0 +1 @@
+web: node index.js

hashicorp/images/waypoint-nodejs-deployment.png

@@ -0,0 +1,10 @@
+# Waypoint NodeJS Example
+
+|Title|Description|
+|---|---|
+|Pack|Cloud Native Buildpack|
+|Cloud|Local|
+|Language|JavaScript|
+|Docs|[Docker](https://www.waypointproject.io/plugins/docker)|
+|Tutorial|[HashiCorp Learn](https://learn.hashicorp.com/tutorials/waypoint/get-started-docker)|
+

hashicorp/images/waypoint-workflow.png

@@ -0,0 +1,10 @@
+const express = require('express')
+const path = require('path')
+const PORT = process.env.PORT || 5000
+
+express()
+  .use(express.static(path.join(__dirname, 'public')))
+  .set('views', path.join(__dirname, 'views'))
+  .set('view engine', 'ejs')
+  .get('/', (req, res) => res.render('pages/index'))
+  .listen(PORT, () => console.log(`Listening on ${ PORT }`))

hashicorp/images/waypoint.png

@@ -0,0 +1,26 @@
+{
+  "name": "node-js-getting-started",
+  "version": "0.3.0",
+  "description": "A sample Node.js app using Express 4",
+  "engines": {
+    "node": "12.x"
+  },
+  "main": "index.js",
+  "scripts": {
+    "start": "node index.js",
+    "test": "node test.js"
+  },
+  "dependencies": {
+    "ejs": "^2.5.6",
+    "express": "^4.15.2"
+  },
+  "devDependencies": {
+    "got": "^11.3.0",
+    "tape": "^4.7.0"
+  },
+  "keywords": [
+    "node",
+    "express"
+  ],
+  "license": "MIT"
+}

hashicorp/packer/linux/ubuntu/playbook.yml

@@ -0,0 +1,136 @@
+/* Copyright 2013 The Chromium Authors. All rights reserved.
+ * Use of this source code is governed by a BSD-style license that can be
+ * found in the LICENSE file. */
+
+html, body {
+  padding: 0;
+  margin: 0;
+  width: 100%;
+  height: 100%;
+}
+
+.icon {
+  -webkit-user-select: none;
+  user-select: none;
+  display: inline-block;
+}
+
+.icon-offline {
+  content: -webkit-image-set( url(assets/default_100_percent/100-error-offline.png) 1x, url(assets/default_200_percent/200-error-offline.png) 2x);
+  position: relative;
+}
+
+.hidden {
+  display: none;
+}
+
+
+/* Offline page */
+
+.offline .interstitial-wrapper {
+  color: #2b2b2b;
+  font-size: 1em;
+  line-height: 1.55;
+  margin: 0 auto;
+  max-width: 600px;
+  padding-top: 100px;
+  width: 100%;
+}
+
+.offline .runner-container {
+  height: 150px;
+  max-width: 600px;
+  overflow: hidden;
+  /*position: absolute;*/
+  top: 35px;
+  width: 44px;
+}
+
+.offline .runner-canvas {
+  height: 150px;
+  max-width: 600px;
+  opacity: 1;
+  overflow: hidden;
+  /*position: absolute;*/
+  top: 0;
+  z-index: 2;
+}
+
+.offline .controller {
+  background: rgba(247, 247, 247, .1);
+  height: 100vh;
+  left: 0;
+  position: absolute;
+  top: 0;
+  width: 100vw;
+  z-index: 1;
+}
+
+#offline-resources {
+  display: none;
+}
+
+@media (max-width: 420px) {
+  .suggested-left > #control-buttons, .suggested-right > #control-buttons {
+    float: none;
+  }
+  .snackbar {
+    left: 0;
+    bottom: 0;
+    width: 100%;
+    border-radius: 0;
+  }
+}
+
+@media (max-height: 350px) {
+  h1 {
+    margin: 0 0 15px;
+  }
+  .icon-offline {
+    margin: 0 0 10px;
+  }
+  .interstitial-wrapper {
+    margin-top: 5%;
+  }
+  .nav-wrapper {
+    margin-top: 30px;
+  }
+}
+
+@media (min-width: 600px) and (max-width: 736px) and (orientation: landscape) {
+  .offline .interstitial-wrapper {
+    margin-left: 0;
+    margin-right: 0;
+  }
+}
+
+@media (min-width: 420px) and (max-width: 736px) and (min-height: 240px) and (max-height: 420px) and (orientation:landscape) {
+  .interstitial-wrapper {
+    margin-bottom: 100px;
+  }
+}
+
+@media (min-height: 240px) and (orientation: landscape) {
+  .offline .interstitial-wrapper {
+    margin-bottom: 90px;
+  }
+  .icon-offline {
+    margin-bottom: 20px;
+  }
+}
+
+@media (max-height: 320px) and (orientation: landscape) {
+  .icon-offline {
+    margin-bottom: 0;
+  }
+  .offline .runner-container {
+    top: 10px;
+  }
+}
+
+@media (max-width: 240px) {
+  .interstitial-wrapper {
+    overflow: inherit;
+    padding: 0 8px;
+  }
+}