Ian Letourneau
ea39d93aa7
Some checks failed
Run Check Script / check (pull_request) Has been cancelled
78 lines
2.3 KiB
Rust
78 lines
2.3 KiB
Rust
use cidr::Ipv4Cidr;
|
|
use harmony::{
|
|
hardware::{Location, SwitchGroup},
|
|
infra::opnsense::OPNSenseManagementInterface,
|
|
inventory::Inventory,
|
|
topology::{HAClusterTopology, LogicalHost, UnmanagedRouter},
|
|
};
|
|
use harmony_macros::{ip, ipv4};
|
|
use harmony_secret::{Secret, SecretManager};
|
|
use serde::{Deserialize, Serialize};
|
|
use std::{net::IpAddr, sync::Arc};
|
|
|
|
#[derive(Secret, Serialize, Deserialize, Debug, PartialEq)]
|
|
struct OPNSenseFirewallConfig {
|
|
username: String,
|
|
password: String,
|
|
}
|
|
|
|
pub async fn get_topology() -> HAClusterTopology {
|
|
let firewall = harmony::topology::LogicalHost {
|
|
ip: ip!("192.168.1.1"),
|
|
name: String::from("opnsense-1"),
|
|
};
|
|
|
|
let config = SecretManager::get_or_prompt::<OPNSenseFirewallConfig>().await;
|
|
let config = config.unwrap();
|
|
|
|
let opnsense = Arc::new(
|
|
harmony::infra::opnsense::OPNSenseFirewall::new(
|
|
firewall,
|
|
None,
|
|
&config.username,
|
|
&config.password,
|
|
)
|
|
.await,
|
|
);
|
|
let lan_subnet = ipv4!("192.168.1.0");
|
|
let gateway_ipv4 = ipv4!("192.168.1.1");
|
|
let gateway_ip = IpAddr::V4(gateway_ipv4);
|
|
harmony::topology::HAClusterTopology {
|
|
domain_name: "demo.harmony.mcd".to_string(),
|
|
router: Arc::new(UnmanagedRouter::new(
|
|
gateway_ip,
|
|
Ipv4Cidr::new(lan_subnet, 24).unwrap(),
|
|
)),
|
|
load_balancer: opnsense.clone(),
|
|
firewall: opnsense.clone(),
|
|
tftp_server: opnsense.clone(),
|
|
http_server: opnsense.clone(),
|
|
dhcp_server: opnsense.clone(),
|
|
dns_server: opnsense.clone(),
|
|
control_plane: vec![LogicalHost {
|
|
ip: ip!("192.168.1.20"),
|
|
name: "master".to_string(),
|
|
}],
|
|
bootstrap_host: LogicalHost {
|
|
ip: ip!("192.168.1.10"),
|
|
name: "bootstrap".to_string(),
|
|
},
|
|
workers: vec![],
|
|
switch: vec![],
|
|
}
|
|
}
|
|
|
|
pub fn get_inventory() -> Inventory {
|
|
Inventory {
|
|
location: Location::new(
|
|
"Some virtual machine or maybe a physical machine if you're cool".to_string(),
|
|
"testopnsense".to_string(),
|
|
),
|
|
switch: SwitchGroup::from([]),
|
|
firewall_mgmt: Box::new(OPNSenseManagementInterface::new()),
|
|
storage_host: vec![],
|
|
worker_host: vec![],
|
|
control_plane_host: vec![],
|
|
}
|
|
}
|