From 509d6c54c5505bd70bc3b8fd1036bbe375fb9cb6 Mon Sep 17 00:00:00 2001 From: leon Date: Sat, 23 May 2026 10:05:16 +0200 Subject: [PATCH] Add some more infrastructure ideas --- README.md | 2 ++ projects/infrastructure/vault-agents.md | 4 ++++ projects/infrastructure/vms-in-nomad.md | 7 +++++++ 3 files changed, 13 insertions(+) create mode 100644 projects/infrastructure/vault-agents.md create mode 100644 projects/infrastructure/vms-in-nomad.md diff --git a/README.md b/README.md index eafd7ca..50b90a7 100644 --- a/README.md +++ b/README.md @@ -69,6 +69,8 @@ Name | Status | Blog Entries [Backup Emails](./projects/infrastructure/backup-emails.md) | - | - [Try sccache](./projects/infrastructure/sccache.md) | - | - [IPv4 for Streaming](./projects/infrastructure/ipv4-streaming.md) | - | - +[Vault Agents](./projects/infrastructure/vault-agents.md) | - | - +[VMs in Nomad](./projects/infrastructure/vms-in-nomad.md) | - | - ## Theory Projects Name | Status | Blog Entries diff --git a/projects/infrastructure/vault-agents.md b/projects/infrastructure/vault-agents.md new file mode 100644 index 0000000..350690e --- /dev/null +++ b/projects/infrastructure/vault-agents.md @@ -0,0 +1,4 @@ +# Vault Agents +I want to use vault agents on my bare metal server to manage most of my secrets that are required for other services (for example consul ACL tokens). +The main open questions are around authenication and permissions, because I want to lock their permissions down as much as possible. +I also want to set this up such that I can easily use this when I need to deploy new things that require secrets from vault. diff --git a/projects/infrastructure/vms-in-nomad.md b/projects/infrastructure/vms-in-nomad.md new file mode 100644 index 0000000..d001da7 --- /dev/null +++ b/projects/infrastructure/vms-in-nomad.md @@ -0,0 +1,7 @@ +# VMs in Nomad +I want to play around with the beta libvirt task driver for nomad to run some VMs. +As a first proving ground for this, I would try to run the gitea runners in a VM, because that allows me to more easily configure them without actually giving them access to the underlying host machine. + +## References +- [Virt Dirver Docs](https://developer.hashicorp.com/nomad/plugins/drivers/virt) +- [Virt Driver GitHub](https://github.com/hashicorp/nomad-driver-virt)