infra:hscloud
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| infra:hscloud [2025/07/18 12:58] – radex | infra:hscloud [2026/06/05 06:15] (current) – radex | ||
|---|---|---|---|
| Line 12: | Line 12: | ||
| * k0.hswaw.net - it runs on the following machines: dcr01s22, dcr01s24, dcr03s16. It has 144 x86 cores and 368GB of RAM. | * k0.hswaw.net - it runs on the following machines: dcr01s22, dcr01s24, dcr03s16. It has 144 x86 cores and 368GB of RAM. | ||
| - | * k1.hswaw.net (new, wip, more details later). It runs on the following machines: dcr03s19n01, | + | * k1.hswaw.net (new, wip, more details later). It runs on the following machines: dcr03s19n01, |
| - | We also have a half PB of storage on old SAS drives | + | We also have ~200TB |
| ===== Tenants ===== | ===== Tenants ===== | ||
| Line 26: | Line 26: | ||
| Here's a list of services that currently live on Boston Packets, but we'd like to migrate to hscloud. Ask on #infra on how to contribute. | Here's a list of services that currently live on Boston Packets, but we'd like to migrate to hscloud. Ask on #infra on how to contribute. | ||
| - | * [[https:// | ||
| * mailman ([[https:// | * mailman ([[https:// | ||
| - | * ldap/ | + | * ldap/ |
| * email services (exim, dovecot) - (hard) | * email services (exim, dovecot) - (hard) | ||
| * mun (irc bot) | * mun (irc bot) | ||
| Line 42: | Line 41: | ||
| personal-* | personal-* | ||
| - | factorio | ||
| - | minecraft | ||
| - | valheim | ||
| - | |||
| - | ## Stage 2 - sensitive / important | ||
| - | |||
| - | nextcloud | ||
| mailman-hackerspace-prod | mailman-hackerspace-prod | ||
| mastodon-hackerspace-{prod, | mastodon-hackerspace-{prod, | ||
| - | capacifier | ||
| - | roundcube | ||
| - | |||
| - | ## Stage 3: Kritische infrastruktur | ||
| - | |||
| codehosting-prod | codehosting-prod | ||
| gerrit | gerrit | ||
| matrix{, | matrix{, | ||
| - | redmine | ||
| kasownik | kasownik | ||
| - | ldapweb | + | monitoring-global |
| - | registry | + | |
| - | site [ working replica, switch over when ready ] | + | |
| - | sso [ working replica, switch over when ready ] | + | |
| ## Already migrated | ## Already migrated | ||
| Line 88: | Line 71: | ||
| wiki | wiki | ||
| paperless | paperless | ||
| + | redmine | ||
| + | site | ||
| + | capacifier | ||
| + | ldapweb | ||
| + | sso | ||
| + | registry | ||
| + | roundcube | ||
| + | asterisk | ||
| + | nextcloud | ||
| </ | </ | ||
| - | ===== k1 Productionization Todolist ===== | + | List of unfinished business before we can make k1 production-grade |
| - | + | ||
| - | List of unfinished business before we can make k1 production-grade: | + | |
| * Storage: Migrate all ceph rbd data | * Storage: Migrate all ceph rbd data | ||
| * Storage: Migrate ceph rgw | * Storage: Migrate ceph rgw | ||
| * Storage: Add benji | * Storage: Add benji | ||
| - | * Extend CockroachDB cluster to k1 | ||
| - | * Implement PSP equivalent | ||
| * Migrate remaining services | * Migrate remaining services | ||
| - | * Finish IPv6/dual-stack implementation | + | * Add global/default NetworkPolicies |
| - | * Add new NetworkPolicies | + | |
| + | Also todo to improve k1 reliability: | ||
| + | |||
| + | * more reliable LoadBalancer routing (fuckin' | ||
| ===== Monitoring ===== | ===== Monitoring ===== | ||
infra/hscloud.1752843530.txt.gz · Last modified: by radex