51257dbe13
Workstream 1 — NAT Gateway: - New public-gateway TF module (VPC-GW-S, masquerade, push_default_route) - Disable public IPs on all 6 Kapsule node pools - Terragrunt live config with kapsule dependency Workstream 2 — Scaleway Cockpit Metrics: - New cockpit TF module (data source, push token, Grafana user) - Grafana Alloy k8s-monitoring Helm values (node-exporter, kube-state-metrics) - DCGM Exporter DaemonSet for GPU metrics (affinity on nvidia.com/gpu.present) - GitLab Prometheus remote_write to Cockpit (filtered to gitlab_/gitaly_/sidekiq_) - Apply-order runbook (3 phases: Cockpit → GitLab → NAT) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
22 lines
571 B
HCL
22 lines
571 B
HCL
resource "scaleway_vpc_public_gateway_ip" "foxhunt" {
|
|
zone = var.zone
|
|
}
|
|
|
|
resource "scaleway_vpc_public_gateway" "foxhunt" {
|
|
name = "foxhunt-gw"
|
|
type = var.gateway_type
|
|
zone = var.zone
|
|
bastion_enabled = var.bastion_enabled
|
|
ip_id = scaleway_vpc_public_gateway_ip.foxhunt.id
|
|
}
|
|
|
|
resource "scaleway_vpc_gateway_network" "foxhunt" {
|
|
gateway_id = scaleway_vpc_public_gateway.foxhunt.id
|
|
private_network_id = var.private_network_id
|
|
enable_masquerade = true
|
|
|
|
ipam_config {
|
|
push_default_route = true
|
|
}
|
|
}
|