Skip to content
This repository has been archived by the owner on Oct 9, 2024. It is now read-only.
/ hashibox Public archive

Simulate a highly-available Cloud Platform with Consul, Nomad, and Vault. OSS & Enterprise versions supported.

License

Notifications You must be signed in to change notification settings

nunchistudio/hashibox

Repository files navigation

HashiBox

HashiBox is a local environment to simulate a highly-available cloud with Consul, Nomad, and Vault. OSS and Enterprise versions of each product are supported. Consul Connect is enabled and uses Vault as CA provider.

It also installs Docker for running Nomad's jobs inside containers.

It leverages Vagrant for virtualization, and Bolt for maintenance automation across nodes.

The main goal of HashiBox is to provide a local setup respecting environment parity for simulating a Cloud Platform from end-to-end before going in production.

Useful links:

Vagrant providers supported:

  • parallels
  • virtualbox
  • vmware_desktop

Architectures supported:

  • amd64
  • arm64

Notes about the environment:

  • ACLs are enabled and automatically bootstrapped in Consul and Nomad. To simplify the setup, the bootstrapped tokens are used in favor of scope-defined ones.
  • To simplify the setup, TLS across Consul, Nomad, and Vault is not configured.
  • Only Vault server is leveraged. Vault agents in client mode are not setup since we don't use it. Feel free to make a pull request to support it.
  • We could have leveraged Vagrant's sync folders instead of Bolt for file sharing with machines. Bolt is a better choice for production-practices but also for automating scripts across nodes.

Summary schema

How HashiBox works

Screenshots

Consul

Consul Services

Consul Nodes

Consul Tokens

Consul Policies

Nomad

Nomad Jobs

Nomad Clients

Nomad Servers

Nomad Tokens

Nomad Topology

Vault

Vault Secrets

Vault Access

License

Repository licensed under the MIT License.