Clean-up, initial silent install framework
This commit is contained in:
Justin Donnelly
@@ -1,8 +1,16 @@
|
|||||||
{
|
{
|
||||||
|
"registry.terraform.io/hashicorp/google": {
|
||||||
|
"hash": "h1:m4KVvG8BmApeUlLI2cL3P8sTY5yZZxrRE7PaHQQRa/M=",
|
||||||
|
"version": "3.41.0"
|
||||||
|
},
|
||||||
"registry.terraform.io/hashicorp/google-beta": {
|
"registry.terraform.io/hashicorp/google-beta": {
|
||||||
"hash": "h1:zsIZIszrwu9B9TGiUMGUF3QrpOT6OxGrTIJIo+b8Re0=",
|
"hash": "h1:zsIZIszrwu9B9TGiUMGUF3QrpOT6OxGrTIJIo+b8Re0=",
|
||||||
"version": "3.41.0"
|
"version": "3.41.0"
|
||||||
},
|
},
|
||||||
|
"registry.terraform.io/hashicorp/null": {
|
||||||
|
"hash": "h1:ysHGBhBNkIiJLEpthB/IVCLpA1Qoncp3KbCTFGFZTO0=",
|
||||||
|
"version": "3.0.0"
|
||||||
|
},
|
||||||
"registry.terraform.io/hashicorp/random": {
|
"registry.terraform.io/hashicorp/random": {
|
||||||
"hash": "h1:nFL6uiwsQFLiP8QCr35sPfWe9LpXI3/c7gP9tYnih+k=",
|
"hash": "h1:nFL6uiwsQFLiP8QCr35sPfWe9LpXI3/c7gP9tYnih+k=",
|
||||||
"version": "2.3.0"
|
"version": "2.3.0"
|
||||||
|
|||||||
@@ -1,367 +0,0 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
|
|
||||||
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
|
|
||||||
"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
|
|
||||||
<!-- Generated by graphviz version 2.43.0 (0)
|
|
||||||
-->
|
|
||||||
<!-- Title: %3 Pages: 1 -->
|
|
||||||
<svg width="2796pt" height="476pt"
|
|
||||||
viewBox="0.00 0.00 2796.37 476.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
|
|
||||||
<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 472)">
|
|
||||||
<title>%3</title>
|
|
||||||
<polygon fill="white" stroke="transparent" points="-4,4 -4,-472 2792.37,-472 2792.37,4 -4,4"/>
|
|
||||||
<!-- [root] google_compute_disk.data (expand) -->
|
|
||||||
<g id="node1" class="node">
|
|
||||||
<title>[root] google_compute_disk.data (expand)</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2046,-180 1842,-180 1842,-144 2046,-144 2046,-180"/>
|
|
||||||
<text text-anchor="middle" x="1944" y="-158.3" font-family="Times,serif" font-size="14.00">google_compute_disk.data</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/google-beta"] -->
|
|
||||||
<g id="node3" class="node">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/google-beta"]</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1589,-108 1212.29,-90 1589,-72 1965.71,-90 1589,-108"/>
|
|
||||||
<text text-anchor="middle" x="1589" y="-86.3" font-family="Times,serif" font-size="14.00">provider["registry.terraform.io/hashicorp/google-beta"]</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_disk.data (expand)->[root] provider["registry.terraform.io/hashicorp/google-beta"] -->
|
|
||||||
<g id="edge1" class="edge">
|
|
||||||
<title>[root] google_compute_disk.data (expand)->[root] provider["registry.terraform.io/hashicorp/google-beta"]</title>
|
|
||||||
<path fill="none" stroke="black" d="M1857.61,-143.97C1799.91,-132.59 1724.6,-117.74 1668.4,-106.66"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1668.98,-103.2 1658.5,-104.7 1667.63,-110.07 1668.98,-103.2"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] random_id.vm_suffix (expand) -->
|
|
||||||
<g id="node5" class="node">
|
|
||||||
<title>[root] random_id.vm_suffix (expand)</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2376,-108 2212,-108 2212,-72 2376,-72 2376,-108"/>
|
|
||||||
<text text-anchor="middle" x="2294" y="-86.3" font-family="Times,serif" font-size="14.00">random_id.vm_suffix</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_disk.data (expand)->[root] random_id.vm_suffix (expand) -->
|
|
||||||
<g id="edge2" class="edge">
|
|
||||||
<title>[root] google_compute_disk.data (expand)->[root] random_id.vm_suffix (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2029.17,-143.97C2081.46,-133.51 2148.43,-120.11 2201.94,-109.41"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2202.65,-112.84 2211.77,-107.45 2201.28,-105.98 2202.65,-112.84"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.disk_type -->
|
|
||||||
<g id="node10" class="node">
|
|
||||||
<title>[root] var.disk_type</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2088,-108 1984,-108 1984,-72 2094,-72 2094,-102 2088,-108"/>
|
|
||||||
<polyline fill="none" stroke="black" points="2088,-108 2088,-102 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="2094,-102 2088,-102 "/>
|
|
||||||
<text text-anchor="middle" x="2039" y="-86.3" font-family="Times,serif" font-size="14.00">var.disk_type</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_disk.data (expand)->[root] var.disk_type -->
|
|
||||||
<g id="edge3" class="edge">
|
|
||||||
<title>[root] google_compute_disk.data (expand)->[root] var.disk_type</title>
|
|
||||||
<path fill="none" stroke="black" d="M1967.48,-143.7C1979.56,-134.8 1994.45,-123.82 2007.52,-114.2"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2009.81,-116.85 2015.79,-108.1 2005.66,-111.22 2009.81,-116.85"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_instance.default (expand) -->
|
|
||||||
<g id="node2" class="node">
|
|
||||||
<title>[root] google_compute_instance.default (expand)</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2152,-252 1898,-252 1898,-216 2152,-216 2152,-252"/>
|
|
||||||
<text text-anchor="middle" x="2025" y="-230.3" font-family="Times,serif" font-size="14.00">google_compute_instance.default</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_instance.default (expand)->[root] google_compute_disk.data (expand) -->
|
|
||||||
<g id="edge4" class="edge">
|
|
||||||
<title>[root] google_compute_instance.default (expand)->[root] google_compute_disk.data (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2004.98,-215.7C1994.87,-206.97 1982.46,-196.24 1971.48,-186.75"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1973.65,-183.99 1963.79,-180.1 1969.07,-189.29 1973.65,-183.99"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.image -->
|
|
||||||
<g id="node11" class="node">
|
|
||||||
<title>[root] var.image</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2144,-180 2064,-180 2064,-144 2150,-144 2150,-174 2144,-180"/>
|
|
||||||
<polyline fill="none" stroke="black" points="2144,-180 2144,-174 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="2150,-174 2144,-174 "/>
|
|
||||||
<text text-anchor="middle" x="2107" y="-158.3" font-family="Times,serif" font-size="14.00">var.image</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_instance.default (expand)->[root] var.image -->
|
|
||||||
<g id="edge5" class="edge">
|
|
||||||
<title>[root] google_compute_instance.default (expand)->[root] var.image</title>
|
|
||||||
<path fill="none" stroke="black" d="M2045.27,-215.7C2055.5,-206.97 2068.06,-196.24 2079.18,-186.75"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2081.63,-189.26 2086.96,-180.1 2077.09,-183.94 2081.63,-189.26"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.vm_type -->
|
|
||||||
<g id="node19" class="node">
|
|
||||||
<title>[root] var.vm_type</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2265.5,-180 2168.5,-180 2168.5,-144 2271.5,-144 2271.5,-174 2265.5,-180"/>
|
|
||||||
<polyline fill="none" stroke="black" points="2265.5,-180 2265.5,-174 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="2271.5,-174 2265.5,-174 "/>
|
|
||||||
<text text-anchor="middle" x="2220" y="-158.3" font-family="Times,serif" font-size="14.00">var.vm_type</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] google_compute_instance.default (expand)->[root] var.vm_type -->
|
|
||||||
<g id="edge6" class="edge">
|
|
||||||
<title>[root] google_compute_instance.default (expand)->[root] var.vm_type</title>
|
|
||||||
<path fill="none" stroke="black" d="M2072.7,-215.88C2099.95,-206.09 2134.3,-193.77 2162.97,-183.47"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2164.22,-186.74 2172.45,-180.07 2161.86,-180.15 2164.22,-186.74"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.project_id -->
|
|
||||||
<g id="node14" class="node">
|
|
||||||
<title>[root] var.project_id</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1520.5,-36 1413.5,-36 1413.5,0 1526.5,0 1526.5,-30 1520.5,-36"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1520.5,-36 1520.5,-30 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1526.5,-30 1520.5,-30 "/>
|
|
||||||
<text text-anchor="middle" x="1470" y="-14.3" font-family="Times,serif" font-size="14.00">var.project_id</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/google-beta"]->[root] var.project_id -->
|
|
||||||
<g id="edge21" class="edge">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/google-beta"]->[root] var.project_id</title>
|
|
||||||
<path fill="none" stroke="black" d="M1562,-73.12C1546,-63.7 1525.47,-51.63 1507.87,-41.28"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1509.37,-38.1 1498.98,-36.04 1505.82,-44.13 1509.37,-38.1"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.region -->
|
|
||||||
<g id="node15" class="node">
|
|
||||||
<title>[root] var.region</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1627.5,-36 1544.5,-36 1544.5,0 1633.5,0 1633.5,-30 1627.5,-36"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1627.5,-36 1627.5,-30 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1633.5,-30 1627.5,-30 "/>
|
|
||||||
<text text-anchor="middle" x="1589" y="-14.3" font-family="Times,serif" font-size="14.00">var.region</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/google-beta"]->[root] var.region -->
|
|
||||||
<g id="edge22" class="edge">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/google-beta"]->[root] var.region</title>
|
|
||||||
<path fill="none" stroke="black" d="M1589,-71.7C1589,-63.98 1589,-54.71 1589,-46.11"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1592.5,-46.1 1589,-36.1 1585.5,-46.1 1592.5,-46.1"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.zone -->
|
|
||||||
<g id="node20" class="node">
|
|
||||||
<title>[root] var.zone</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1722,-36 1652,-36 1652,0 1728,0 1728,-30 1722,-36"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1722,-36 1722,-30 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1728,-30 1722,-30 "/>
|
|
||||||
<text text-anchor="middle" x="1690" y="-14.3" font-family="Times,serif" font-size="14.00">var.zone</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/google-beta"]->[root] var.zone -->
|
|
||||||
<g id="edge23" class="edge">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/google-beta"]->[root] var.zone</title>
|
|
||||||
<path fill="none" stroke="black" d="M1612.17,-72.94C1625.41,-63.76 1642.24,-52.1 1656.86,-41.97"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1658.95,-44.78 1665.17,-36.21 1654.96,-39.03 1658.95,-44.78"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/random"] -->
|
|
||||||
<g id="node4" class="node">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/random"]</title>
|
|
||||||
<polygon fill="none" stroke="black" points="2294,-36 1943.6,-18 2294,0 2644.4,-18 2294,-36"/>
|
|
||||||
<text text-anchor="middle" x="2294" y="-14.3" font-family="Times,serif" font-size="14.00">provider["registry.terraform.io/hashicorp/random"]</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] random_id.vm_suffix (expand)->[root] provider["registry.terraform.io/hashicorp/random"] -->
|
|
||||||
<g id="edge25" class="edge">
|
|
||||||
<title>[root] random_id.vm_suffix (expand)->[root] provider["registry.terraform.io/hashicorp/random"]</title>
|
|
||||||
<path fill="none" stroke="black" d="M2294,-71.7C2294,-63.98 2294,-54.71 2294,-46.11"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2297.5,-46.1 2294,-36.1 2290.5,-46.1 2297.5,-46.1"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.additional_users -->
|
|
||||||
<g id="node6" class="node">
|
|
||||||
<title>[root] var.additional_users</title>
|
|
||||||
<polygon fill="none" stroke="black" points="154,-324 0,-324 0,-288 160,-288 160,-318 154,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="154,-324 154,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="160,-318 154,-318 "/>
|
|
||||||
<text text-anchor="middle" x="80" y="-302.3" font-family="Times,serif" font-size="14.00">var.additional_users</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.availability_type -->
|
|
||||||
<g id="node7" class="node">
|
|
||||||
<title>[root] var.availability_type</title>
|
|
||||||
<polygon fill="none" stroke="black" points="332,-324 178,-324 178,-288 338,-288 338,-318 332,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="332,-324 332,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="338,-318 332,-318 "/>
|
|
||||||
<text text-anchor="middle" x="258" y="-302.3" font-family="Times,serif" font-size="14.00">var.availability_type</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.backup_configuration -->
|
|
||||||
<g id="node8" class="node">
|
|
||||||
<title>[root] var.backup_configuration</title>
|
|
||||||
<polygon fill="none" stroke="black" points="545.5,-324 356.5,-324 356.5,-288 551.5,-288 551.5,-318 545.5,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="545.5,-324 545.5,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="551.5,-318 545.5,-318 "/>
|
|
||||||
<text text-anchor="middle" x="454" y="-302.3" font-family="Times,serif" font-size="14.00">var.backup_configuration</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.database_version -->
|
|
||||||
<g id="node9" class="node">
|
|
||||||
<title>[root] var.database_version</title>
|
|
||||||
<polygon fill="none" stroke="black" points="730.5,-324 569.5,-324 569.5,-288 736.5,-288 736.5,-318 730.5,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="730.5,-324 730.5,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="736.5,-318 730.5,-318 "/>
|
|
||||||
<text text-anchor="middle" x="653" y="-302.3" font-family="Times,serif" font-size="14.00">var.database_version</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.min_cpu -->
|
|
||||||
<g id="node12" class="node">
|
|
||||||
<title>[root] var.min_cpu</title>
|
|
||||||
<polygon fill="none" stroke="black" points="850,-324 754,-324 754,-288 856,-288 856,-318 850,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="850,-324 850,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="856,-318 850,-318 "/>
|
|
||||||
<text text-anchor="middle" x="805" y="-302.3" font-family="Times,serif" font-size="14.00">var.min_cpu</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.private_network -->
|
|
||||||
<g id="node13" class="node">
|
|
||||||
<title>[root] var.private_network</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1027.5,-324 874.5,-324 874.5,-288 1033.5,-288 1033.5,-318 1027.5,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1027.5,-324 1027.5,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1033.5,-318 1027.5,-318 "/>
|
|
||||||
<text text-anchor="middle" x="954" y="-302.3" font-family="Times,serif" font-size="14.00">var.private_network</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.tier -->
|
|
||||||
<g id="node16" class="node">
|
|
||||||
<title>[root] var.tier</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1114,-324 1052,-324 1052,-288 1120,-288 1120,-318 1114,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1114,-324 1114,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1120,-318 1114,-318 "/>
|
|
||||||
<text text-anchor="middle" x="1086" y="-302.3" font-family="Times,serif" font-size="14.00">var.tier</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.user_name -->
|
|
||||||
<g id="node17" class="node">
|
|
||||||
<title>[root] var.user_name</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1252,-324 1138,-324 1138,-288 1258,-288 1258,-318 1252,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1252,-324 1252,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1258,-318 1252,-318 "/>
|
|
||||||
<text text-anchor="middle" x="1198" y="-302.3" font-family="Times,serif" font-size="14.00">var.user_name</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] var.user_password -->
|
|
||||||
<g id="node18" class="node">
|
|
||||||
<title>[root] var.user_password</title>
|
|
||||||
<polygon fill="none" stroke="black" points="1419.5,-324 1276.5,-324 1276.5,-288 1425.5,-288 1425.5,-318 1419.5,-324"/>
|
|
||||||
<polyline fill="none" stroke="black" points="1419.5,-324 1419.5,-318 "/>
|
|
||||||
<polyline fill="none" stroke="black" points="1425.5,-318 1419.5,-318 "/>
|
|
||||||
<text text-anchor="middle" x="1351" y="-302.3" font-family="Times,serif" font-size="14.00">var.user_password</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup) -->
|
|
||||||
<g id="node21" class="node">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)</title>
|
|
||||||
<ellipse fill="none" stroke="black" cx="1020" cy="-378" rx="222.86" ry="18"/>
|
|
||||||
<text text-anchor="middle" x="1020" y="-374.3" font-family="Times,serif" font-size="14.00">[root] meta.count-boundary (EachMode fixup)</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.additional_users -->
|
|
||||||
<g id="edge9" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.additional_users</title>
|
|
||||||
<path fill="none" stroke="black" d="M812.53,-371.41C642.32,-365.1 395.02,-351.97 170.46,-324.09"/>
|
|
||||||
<polygon fill="black" stroke="black" points="170.82,-320.61 160.46,-322.84 169.94,-327.56 170.82,-320.61"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.availability_type -->
|
|
||||||
<g id="edge10" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.availability_type</title>
|
|
||||||
<path fill="none" stroke="black" d="M834.82,-367.92C701.95,-360.09 518.54,-346.62 348.6,-324.14"/>
|
|
||||||
<polygon fill="black" stroke="black" points="348.84,-320.64 338.47,-322.78 347.91,-327.57 348.84,-320.64"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.backup_configuration -->
|
|
||||||
<g id="edge11" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.backup_configuration</title>
|
|
||||||
<path fill="none" stroke="black" d="M888.44,-363.41C798.95,-353.79 677.6,-340.02 561.71,-324.21"/>
|
|
||||||
<polygon fill="black" stroke="black" points="561.97,-320.71 551.59,-322.82 561.02,-327.64 561.97,-320.71"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.database_version -->
|
|
||||||
<g id="edge12" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.database_version</title>
|
|
||||||
<path fill="none" stroke="black" d="M937.18,-361.2C880.62,-350.42 805.58,-336.1 746.82,-324.89"/>
|
|
||||||
<polygon fill="black" stroke="black" points="747.27,-321.42 736.79,-322.98 745.96,-328.29 747.27,-321.42"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.min_cpu -->
|
|
||||||
<g id="edge13" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.min_cpu</title>
|
|
||||||
<path fill="none" stroke="black" d="M969.05,-360.41C938.21,-350.37 898.7,-337.51 866.18,-326.92"/>
|
|
||||||
<polygon fill="black" stroke="black" points="866.92,-323.48 856.33,-323.71 864.76,-330.14 866.92,-323.48"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.private_network -->
|
|
||||||
<g id="edge14" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.private_network</title>
|
|
||||||
<path fill="none" stroke="black" d="M1003.69,-359.7C995.69,-351.22 985.93,-340.86 977.18,-331.58"/>
|
|
||||||
<polygon fill="black" stroke="black" points="979.53,-328.98 970.13,-324.1 974.44,-333.78 979.53,-328.98"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.tier -->
|
|
||||||
<g id="edge15" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.tier</title>
|
|
||||||
<path fill="none" stroke="black" d="M1036.31,-359.7C1044.31,-351.22 1054.07,-340.86 1062.82,-331.58"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1065.56,-333.78 1069.87,-324.1 1060.47,-328.98 1065.56,-333.78"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.user_name -->
|
|
||||||
<g id="edge16" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.user_name</title>
|
|
||||||
<path fill="none" stroke="black" d="M1062.64,-360.23C1087.37,-350.51 1118.73,-338.17 1145.03,-327.83"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1146.45,-331.03 1154.48,-324.12 1143.89,-324.52 1146.45,-331.03"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] var.user_password -->
|
|
||||||
<g id="edge17" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] var.user_password</title>
|
|
||||||
<path fill="none" stroke="black" d="M1095.52,-361.03C1146.43,-350.26 1213.66,-336.05 1266.37,-324.9"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1267.31,-328.28 1276.37,-322.78 1265.86,-321.43 1267.31,-328.28"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] output.gce_external_ip (expand) -->
|
|
||||||
<g id="node22" class="node">
|
|
||||||
<title>[root] output.gce_external_ip (expand)</title>
|
|
||||||
<ellipse fill="none" stroke="black" cx="1632" cy="-306" rx="188.47" ry="18"/>
|
|
||||||
<text text-anchor="middle" x="1632" y="-302.3" font-family="Times,serif" font-size="14.00">[root] output.gce_external_ip (expand)</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] output.gce_external_ip (expand) -->
|
|
||||||
<g id="edge7" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] output.gce_external_ip (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M1142.74,-362.96C1248.21,-350.9 1399.66,-333.58 1506.04,-321.41"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1506.66,-324.86 1516.2,-320.25 1505.86,-317.9 1506.66,-324.86"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] output.gce_internal_ip (expand) -->
|
|
||||||
<g id="node23" class="node">
|
|
||||||
<title>[root] output.gce_internal_ip (expand)</title>
|
|
||||||
<ellipse fill="none" stroke="black" cx="2025" cy="-306" rx="186.57" ry="18"/>
|
|
||||||
<text text-anchor="middle" x="2025" y="-302.3" font-family="Times,serif" font-size="14.00">[root] output.gce_internal_ip (expand)</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] meta.count-boundary (EachMode fixup)->[root] output.gce_internal_ip (expand) -->
|
|
||||||
<g id="edge8" class="edge">
|
|
||||||
<title>[root] meta.count-boundary (EachMode fixup)->[root] output.gce_internal_ip (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M1193.67,-366.69C1357.54,-356.7 1610.06,-340.66 1829,-324 1846.6,-322.66 1865.08,-321.17 1883.37,-319.64"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1883.84,-323.11 1893.51,-318.79 1883.25,-316.14 1883.84,-323.11"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] output.gce_external_ip (expand)->[root] google_compute_instance.default (expand) -->
|
|
||||||
<g id="edge18" class="edge">
|
|
||||||
<title>[root] output.gce_external_ip (expand)->[root] google_compute_instance.default (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M1716.79,-289.9C1776.12,-279.33 1855.8,-265.14 1919.27,-253.83"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1920.09,-257.24 1929.32,-252.04 1918.86,-250.35 1920.09,-257.24"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] output.gce_internal_ip (expand)->[root] google_compute_instance.default (expand) -->
|
|
||||||
<g id="edge19" class="edge">
|
|
||||||
<title>[root] output.gce_internal_ip (expand)->[root] google_compute_instance.default (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2025,-287.7C2025,-279.98 2025,-270.71 2025,-262.11"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2028.5,-262.1 2025,-252.1 2021.5,-262.1 2028.5,-262.1"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/google-beta"] (close) -->
|
|
||||||
<g id="node24" class="node">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/google-beta"] (close)</title>
|
|
||||||
<ellipse fill="none" stroke="black" cx="2123" cy="-378" rx="328.44" ry="18"/>
|
|
||||||
<text text-anchor="middle" x="2123" y="-374.3" font-family="Times,serif" font-size="14.00">[root] provider["registry.terraform.io/hashicorp/google-beta"] (close)</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/google-beta"] (close)->[root] google_compute_instance.default (expand) -->
|
|
||||||
<g id="edge20" class="edge">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/google-beta"] (close)->[root] google_compute_instance.default (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2177.3,-360.21C2194.32,-352.1 2211.2,-340.45 2221,-324 2229.19,-310.26 2230.73,-300.7 2221,-288 2210.23,-273.93 2177.68,-262.73 2142.13,-254.33"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2142.56,-250.84 2132.04,-252.03 2141.01,-257.66 2142.56,-250.84"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/random"] (close) -->
|
|
||||||
<g id="node25" class="node">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/random"] (close)</title>
|
|
||||||
<ellipse fill="none" stroke="black" cx="2479" cy="-234" rx="309.25" ry="18"/>
|
|
||||||
<text text-anchor="middle" x="2479" y="-230.3" font-family="Times,serif" font-size="14.00">[root] provider["registry.terraform.io/hashicorp/random"] (close)</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] provider["registry.terraform.io/hashicorp/random"] (close)->[root] random_id.vm_suffix (expand) -->
|
|
||||||
<g id="edge24" class="edge">
|
|
||||||
<title>[root] provider["registry.terraform.io/hashicorp/random"] (close)->[root] random_id.vm_suffix (expand)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2456.68,-215.87C2423.63,-190.5 2361.56,-142.85 2324.38,-114.32"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2326.46,-111.5 2316.39,-108.19 2322.2,-117.05 2326.46,-111.5"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] root -->
|
|
||||||
<g id="node26" class="node">
|
|
||||||
<title>[root] root</title>
|
|
||||||
<ellipse fill="none" stroke="black" cx="2123" cy="-450" rx="58.49" ry="18"/>
|
|
||||||
<text text-anchor="middle" x="2123" y="-446.3" font-family="Times,serif" font-size="14.00">[root] root</text>
|
|
||||||
</g>
|
|
||||||
<!-- [root] root->[root] meta.count-boundary (EachMode fixup) -->
|
|
||||||
<g id="edge26" class="edge">
|
|
||||||
<title>[root] root->[root] meta.count-boundary (EachMode fixup)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2066.4,-445.41C1907.84,-435.35 1454.23,-406.56 1199.37,-390.38"/>
|
|
||||||
<polygon fill="black" stroke="black" points="1199.46,-386.88 1189.26,-389.74 1199.02,-393.87 1199.46,-386.88"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] root->[root] provider["registry.terraform.io/hashicorp/google-beta"] (close) -->
|
|
||||||
<g id="edge27" class="edge">
|
|
||||||
<title>[root] root->[root] provider["registry.terraform.io/hashicorp/google-beta"] (close)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2123,-431.7C2123,-423.98 2123,-414.71 2123,-406.11"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2126.5,-406.1 2123,-396.1 2119.5,-406.1 2126.5,-406.1"/>
|
|
||||||
</g>
|
|
||||||
<!-- [root] root->[root] provider["registry.terraform.io/hashicorp/random"] (close) -->
|
|
||||||
<g id="edge28" class="edge">
|
|
||||||
<title>[root] root->[root] provider["registry.terraform.io/hashicorp/random"] (close)</title>
|
|
||||||
<path fill="none" stroke="black" d="M2181.47,-448.02C2267.64,-445.27 2422.58,-434.89 2460,-396 2494.22,-360.43 2490.47,-298.05 2484.72,-262.27"/>
|
|
||||||
<polygon fill="black" stroke="black" points="2488.1,-261.32 2482.91,-252.09 2481.21,-262.54 2488.1,-261.32"/>
|
|
||||||
</g>
|
|
||||||
</g>
|
|
||||||
</svg>
|
|
||||||
|
Before Width: | Height: | Size: 24 KiB |
@@ -36,6 +36,10 @@ resource "google_compute_instance" "central" {
|
|||||||
# hostname = "central-${random_id.vm_suffix.hex}"
|
# hostname = "central-${random_id.vm_suffix.hex}"
|
||||||
|
|
||||||
# tags = ["foo", "bar"]
|
# tags = ["foo", "bar"]
|
||||||
|
# timeouts {
|
||||||
|
# create = "60m"
|
||||||
|
# delete = "2h"
|
||||||
|
# }
|
||||||
|
|
||||||
boot_disk {
|
boot_disk {
|
||||||
initialize_params {
|
initialize_params {
|
||||||
@@ -67,5 +71,25 @@ resource "google_compute_instance" "central" {
|
|||||||
email = "terraform@esoteric-parsec-243510.iam.gserviceaccount.com"
|
email = "terraform@esoteric-parsec-243510.iam.gserviceaccount.com"
|
||||||
scopes = ["userinfo-email", "compute-rw", "storage-ro"]
|
scopes = ["userinfo-email", "compute-rw", "storage-ro"]
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "null_resource" "bootstrap" {
|
||||||
|
|
||||||
|
connection {
|
||||||
|
type = "winrm"
|
||||||
|
https = true
|
||||||
|
insecure = true
|
||||||
|
use_ntlm = true
|
||||||
|
user = var.user_name
|
||||||
|
password = var.user_password
|
||||||
|
host = google_compute_instance.central.name
|
||||||
|
timeout = "20m"
|
||||||
|
}
|
||||||
|
|
||||||
|
provisioner "remote-exec" {
|
||||||
|
inline = [
|
||||||
|
"powershell.exe -ExecutionPolicy Bypass -File E:\\deploy\\scripts\\win-nfs_client-install.ps1"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,29 +1,9 @@
|
|||||||
#!/usr/bin/env pwsh
|
#!/usr/bin/env pwsh
|
||||||
#
|
#
|
||||||
## Intended to be executed in a GitOps pipeline on the new GCE resource by remote-exec in TF
|
## Intended to be executed in a GitOps pipeline on the new GCE resource by remote-exec in TF
|
||||||
##
|
## or as a startup script via Metadata key windows-startup-script-url
|
||||||
Enable-PSRemoting
|
##
|
||||||
winrm set 'winrm/config/client' '@{TrustedHosts="*"}'
|
|
||||||
|
|
||||||
if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
|
|
||||||
$password = ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
|
|
||||||
New-LocalUser `
|
|
||||||
-Name 'qservice' `
|
|
||||||
-Password $password `
|
|
||||||
-PasswordNeverExpires `
|
|
||||||
-UserMayNotChangePassword
|
|
||||||
}
|
|
||||||
|
|
||||||
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
|
|
||||||
|
|
||||||
New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
|
|
||||||
New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
|
|
||||||
|
|
||||||
# if ($env:computername -ne 'central') {
|
|
||||||
# exit 0
|
|
||||||
# }
|
|
||||||
|
|
||||||
# Get-WmiObject -Class Win32_Volume -Filter "DriveType=5" | Set-WmiInstance -Arguments @{DriveLetter="Z:"}
|
|
||||||
|
|
||||||
Get-Disk |
|
Get-Disk |
|
||||||
Where-Object partitionstyle -eq 'raw' |
|
Where-Object partitionstyle -eq 'raw' |
|
||||||
@@ -38,7 +18,7 @@ if (! (Test-Path E:\)) {
|
|||||||
|
|
||||||
$deploy_path = "E:\deploy"
|
$deploy_path = "E:\deploy"
|
||||||
|
|
||||||
if (-Not (Test-Path $deploy_path)) {
|
if (! (Test-Path $deploy_path)) {
|
||||||
New-Item -ItemType Directory -Path $deploy_path
|
New-Item -ItemType Directory -Path $deploy_path
|
||||||
New-Item -ItemType Directory -Path $deploy_path\binaries
|
New-Item -ItemType Directory -Path $deploy_path\binaries
|
||||||
New-Item -ItemType Directory -Path $deploy_path\modules
|
New-Item -ItemType Directory -Path $deploy_path\modules
|
||||||
@@ -46,34 +26,68 @@ if (-Not (Test-Path $deploy_path)) {
|
|||||||
New-Item -ItemType Directory -Path $deploy_path\modules\ps
|
New-Item -ItemType Directory -Path $deploy_path\modules\ps
|
||||||
}
|
}
|
||||||
|
|
||||||
# Update these gcloud commands to be vars, allows portability
|
gcloud components update -Force
|
||||||
#
|
|
||||||
# CLOUDCLI_UPDATE
|
|
||||||
# OBJCLI_COPY
|
|
||||||
|
|
||||||
# gcloud components update -Force
|
|
||||||
gsutil -m cp gs://qliksense/Qlik_Sense* $deploy_path\binaries\
|
|
||||||
gsutil -m cp -r gs://qliksense/scripts $deploy_path\
|
gsutil -m cp -r gs://qliksense/scripts $deploy_path\
|
||||||
gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'
|
gsutil -m cp gs://qliksense/binaries/Qlik_Sense* $deploy_path\binaries\
|
||||||
|
# gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'
|
||||||
|
Unblock-File -Path $deploy_path\binaries\Qlik_Sense_setup.exe
|
||||||
|
Unblock-File -Path $deploy_path\binaries\Qlik_Sense_update.exe
|
||||||
|
|
||||||
|
# Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v7.0.3/PowerShell-7.0.3-win-x64.zip -OutFile $deploy_path\binaries\PowerShell-7.0.3-win-x64.zip
|
||||||
|
|
||||||
|
# iwr -Uri https://aka.ms/win32-x64-user-stable -Outfile ..\binaries\vscode_stable.exe
|
||||||
|
|
||||||
|
if ($env:computername -notlike "central-*") {
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
|
||||||
|
$password = ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
|
||||||
|
New-LocalUser `
|
||||||
|
-Name 'qservice' `
|
||||||
|
-Password $password `
|
||||||
|
-PasswordNeverExpires `
|
||||||
|
-UserMayNotChangePassword
|
||||||
|
}
|
||||||
|
|
||||||
|
if(!(Get-LocalUser -Name qlikadmin -ErrorAction Ignore)) {
|
||||||
|
$password = ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
|
||||||
|
New-LocalUser `
|
||||||
|
-Name 'qlikadmin' `
|
||||||
|
-Password $password `
|
||||||
|
-PasswordNeverExpires `
|
||||||
|
-UserMayNotChangePassword
|
||||||
|
}
|
||||||
|
|
||||||
|
Add-LocalGroupMember -Group "Administrators" -Member "qservice", "qlikadmin"
|
||||||
|
|
||||||
|
# WinRM Connects
|
||||||
|
New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
|
||||||
|
New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
|
||||||
|
|
||||||
# Push-Location $deploy_path\modules\ps
|
# Push-Location $deploy_path\modules\ps
|
||||||
Get-PackageProvider -Name NuGet -ForceBootstrap
|
Get-PackageProvider -Name NuGet -ForceBootstrap
|
||||||
# Below will also download and save the QlikResources requirements modules
|
|
||||||
# Save-Module -Path $deploy_path/modules/ps/ -Name QlikResources -RequiredVersion 1.9.2
|
Install-Module PSDesiredStateConfiguration -Force
|
||||||
# Save-Module -Path $deploy_path/modules/ps/ -Name GoogleCloud
|
Install-Module PSDscResources -Force
|
||||||
|
Install-Module QlikResources -Force
|
||||||
|
|
||||||
# HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
|
# HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
|
||||||
# New-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce' -Name 'Run' -Value '<insert_script_command_here>'
|
# New-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce' -Name 'Run' -Value '<insert_script_command_here>'
|
||||||
|
|
||||||
|
# $shortname = "$env:COMPUTERNAME".ToLower()
|
||||||
|
# $thumbprint = ( New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName $shortname -FriendlyName "WinRM HTTPS Listener" -NotAfter (Get-Date).AddYears(20) ).Thumbprint
|
||||||
|
|
||||||
Set-ExecutionPolicy Bypass -Scope Process -Force; E:\deploy\scripts\win-nfs_client-install.ps1
|
# Testing Tools
|
||||||
gcloud compute instances add-tags central-12d5 --tags=bootstrapped --zone europe-west1-d
|
# & $deploy_path\binaries\vscode_stable.exe /VERYSILENT /MERGETASKS=!runcode
|
||||||
|
|
||||||
|
# QSEoW FW Rule
|
||||||
|
Write-Host "<---- Create QSEoW FW Rule"
|
||||||
|
New-NetFirewallRule -DisplayName "Qlik Sense" -Direction Inbound -LocalPort 443, 4244,4242, 4432, 4444, 5355, 5353, 80, 4248, 3090, 4000, 5555, 5556, 4993, 4994 -Protocol TCP -Action Allow -ea Stop | Out-Null
|
||||||
|
|
||||||
# Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
|
# Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
|
||||||
# choco install git --no-progress
|
|
||||||
# Import-Module "$env:ChocolateyInstall\helpers\chocolateyProfile.psm1"
|
Set-GceInstance -Name $shortname -Zone europe-west1-d -AddTag "bootstrapped"
|
||||||
# Update-SessionEnvironment
|
Set-GceInstance -Name $shortname -Zone europe-west1-d -RemoveMetadata "windows-startup-script-url"
|
||||||
# git clone https://gitlab+deploy-token-52544:YH-1SVsTrNmzj7AXz7oh@gitlab.com/ahaydon/cityclarity-psm.git ./CitiClarity
|
|
||||||
# Pop-Location
|
|
||||||
|
|
||||||
Exit 0
|
Exit 0
|
||||||
|
|||||||
@@ -7,50 +7,52 @@ $configData = @{
|
|||||||
|
|
||||||
$password = ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
|
$password = ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
|
||||||
$SenseService = New-Object System.Management.Automation.PSCredential("$env:computername\qservice", $password)
|
$SenseService = New-Object System.Management.Automation.PSCredential("$env:computername\qservice", $password)
|
||||||
$QlikAdmin = New-Object System.Management.Automation.PSCredential("$env:computername\qlik", $password)
|
$QlikAdmin = New-Object System.Management.Automation.PSCredential("$env:computername\qlikadmin", $password)
|
||||||
|
|
||||||
Configuration QlikConfig
|
Configuration QlikConfig
|
||||||
{
|
{
|
||||||
Import-DscResource -ModuleName PSDesiredStateConfiguration, QlikResources
|
Import-DscResource -ModuleName QlikResources, PSDscResources
|
||||||
|
|
||||||
Node localhost
|
Node localhost
|
||||||
{
|
{
|
||||||
User QlikAdmin
|
# User QlikAdmin
|
||||||
{
|
# {
|
||||||
UserName = $QlikAdmin.GetNetworkCredential().UserName
|
# UserName = $QlikAdmin.GetNetworkCredential().UserName
|
||||||
Password = $QlikAdmin
|
# Password = $QlikAdmin
|
||||||
FullName = 'Qlik User'
|
# FullName = 'Qlik User'
|
||||||
PasswordChangeRequired = $false
|
# PasswordChangeRequired = $false
|
||||||
PasswordNeverExpires = $true
|
# PasswordNeverExpires = $true
|
||||||
Ensure = 'Present'
|
# Ensure = 'Present'
|
||||||
DependsOn = "[Windows]local"
|
# DependsOn = "[Windows]local"
|
||||||
}
|
# }
|
||||||
|
|
||||||
User SenseService
|
# User SenseService
|
||||||
{
|
# {
|
||||||
UserName = $SenseService.GetNetworkCredential().UserName
|
# UserName = $SenseService.GetNetworkCredential().UserName
|
||||||
Password = $SenseService
|
# Password = $SenseService
|
||||||
FullName = 'Qlik Sense Service Account'
|
# FullName = 'Qlik Sense Service Account'
|
||||||
PasswordChangeNotAllowed = $true
|
# PasswordChangeNotAllowed = $true
|
||||||
PasswordChangeRequired = $false
|
# PasswordChangeRequired = $false
|
||||||
PasswordNeverExpires = $true
|
# PasswordNeverExpires = $true
|
||||||
Ensure = 'Present'
|
# Ensure = 'Present'
|
||||||
DependsOn = "[Windows]local"
|
# DependsOn = "[Windows]local"
|
||||||
}
|
# }
|
||||||
|
|
||||||
Group Administrators
|
# Group Administrators
|
||||||
{
|
# {
|
||||||
GroupName = 'Administrators'
|
# GroupName = 'Administrators'
|
||||||
MembersToInclude = $QlikAdmin.GetNetworkCredential().UserName, $SenseService.GetNetworkCredential().UserName
|
# MembersToInclude = $QlikAdmin.GetNetworkCredential().UserName, $SenseService.GetNetworkCredential().UserName
|
||||||
DependsOn = "[User]QlikAdmin", "[User]SenseService"
|
# DependsOn = "[User]QlikAdmin", "[User]SenseService"
|
||||||
}
|
# }
|
||||||
|
|
||||||
QlikCentral CentralNode
|
QlikCentral CentralNode
|
||||||
{
|
{
|
||||||
SenseService = $SenseService
|
SenseService = $SenseService
|
||||||
QlikAdmin = $QlikAdmin
|
QlikAdmin = $QlikAdmin
|
||||||
ProductName = 'Qlik Sense June 2018'
|
ProductName = 'Qlik Sense September 2020 Patch 2'
|
||||||
SetupPath = 'C:\Install\Qlik_Sense_setup.exe'
|
SetupPath = 'E:\deploy\binaries\Qlik_Sense_setup.exe'
|
||||||
|
PatchPath = 'E:\deploy\binaries\Qlik_Sense_update.exe'
|
||||||
|
ClusterShareHost = ""
|
||||||
License = @{
|
License = @{
|
||||||
Serial = '1234567890'
|
Serial = '1234567890'
|
||||||
Control = '12345'
|
Control = '12345'
|
||||||
@@ -58,32 +60,37 @@ Configuration QlikConfig
|
|||||||
Organization = 'Organization'
|
Organization = 'Organization'
|
||||||
}
|
}
|
||||||
PSDscRunasCredential = $QlikAdmin
|
PSDscRunasCredential = $QlikAdmin
|
||||||
DependsOn = "[Group]Administrators"
|
DependsOn = "[MSFT_GroupResource]Administrators"
|
||||||
}
|
}
|
||||||
|
|
||||||
QlikVirtualProxy SAML
|
# QlikVirtualProxy SAML
|
||||||
{
|
# {
|
||||||
Prefix = "saml"
|
# Prefix = "saml"
|
||||||
Description = "SAML"
|
# Description = "SAML"
|
||||||
SessionCookieHeaderName = "X-Qlik-Session-SAML"
|
# SessionCookieHeaderName = "X-Qlik-Session-SAML"
|
||||||
LoadBalancingServerNodes = "name eq 'Central'"
|
# LoadBalancingServerNodes = "name eq 'Central'"
|
||||||
AuthenticationMethod = "saml"
|
# AuthenticationMethod = "saml"
|
||||||
SamlMetadataIdp = (Get-Content -raw c:\install\idp-metadata.xml)
|
# SamlMetadataIdp = (Get-Content -raw E:\deploy\idp-metadata.xml)
|
||||||
SamlHostUri = "https://$($env:computername)"
|
# SamlHostUri = "https://$($env:computername)"
|
||||||
SamlEntityId = "https://$($env:computername)/saml"
|
# SamlEntityId = "https://$($env:computername)/saml"
|
||||||
SamlAttributeUserId = "uid"
|
# SamlAttributeUserId = "uid"
|
||||||
SamlAttributeUserDirectory = "[SAML]"
|
# SamlAttributeUserDirectory = "[SAML]"
|
||||||
SamlAttributeMapMandatory = @{
|
# SamlAttributeMapMandatory = @{
|
||||||
mail = 'email'
|
# mail = 'email'
|
||||||
}
|
# }
|
||||||
samlSlo = $true
|
# samlSlo = $true
|
||||||
SamlMetadataExportPath = "c:\install\saml_metadata_sp.xml"
|
# SamlMetadataExportPath = "E:\deploy\saml_metadata_sp.xml"
|
||||||
Proxy = $env:computername
|
# Proxy = $env:computername
|
||||||
PSDscRunasCredential = $QlikAdmin
|
# PSDscRunasCredential = $QlikAdmin
|
||||||
Ensure = "Present"
|
# Ensure = "Present"
|
||||||
}
|
# }
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
QlikConfig -ConfigurationData $configData
|
QlikConfig -ConfigurationData $configData
|
||||||
Start-DscConfiguration -Path .\QlikConfig -Wait -Verbose -Force
|
|
||||||
|
if (! (Test-Path E:\deploy\scripts\QlikConfig)) {
|
||||||
|
New-Item -ItemType Directory -Path E:\deploy\scripts\QlikConfig
|
||||||
|
}
|
||||||
|
|
||||||
|
Start-DscConfiguration -Path E:\deploy\scripts\QlikConfig -Wait -Verbose -Force
|
||||||
|
|||||||
@@ -1,518 +0,0 @@
|
|||||||
Configuration SenseSetup {
|
|
||||||
# Load required modules
|
|
||||||
Import-DscResource -ModuleName PSDesiredStateConfiguration, QlikResources #, xSmbShare, CitiClarity
|
|
||||||
|
|
||||||
# Configuration for all nodes
|
|
||||||
Node $AllNodes.NodeName {
|
|
||||||
LocalConfigurationManager
|
|
||||||
{
|
|
||||||
CertificateId = Get-PfxCertificate $Node.CertificateFile
|
|
||||||
ConfigurationMode = 'ApplyOnly'
|
|
||||||
RebootNodeIfNeeded = $false
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure service account is in local Administrators group prior to install of Sense
|
|
||||||
$ServiceUsername = $Node.ServiceAccount.UserName
|
|
||||||
Script AdministratorsGroup {
|
|
||||||
TestScript = {
|
|
||||||
$IsMember = (Get-LocalGroupMember -Name Administrators).Name -contains $using:ServiceUsername
|
|
||||||
if (Test-Path "$env:ProgramFiles\Qlik\Sense") {
|
|
||||||
return (-Not $IsMember)
|
|
||||||
} else {
|
|
||||||
return $IsMember
|
|
||||||
}
|
|
||||||
}
|
|
||||||
SetScript = {
|
|
||||||
if (Test-Path "$env:ProgramFiles\Qlik\Sense") {
|
|
||||||
Remove-LocalGroupMember `
|
|
||||||
-Name 'Administrators' `
|
|
||||||
-Member $using:ServiceUsername
|
|
||||||
} else {
|
|
||||||
Add-LocalGroupMember `
|
|
||||||
-Name 'Administrators' `
|
|
||||||
-Member $using:ServiceUsername
|
|
||||||
}
|
|
||||||
}
|
|
||||||
GetScript = {
|
|
||||||
@{ Result = (Get-LocalGroupMember -Name Administrators) }
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure 'High performance' power profile is active
|
|
||||||
Windows PowerPolicy {
|
|
||||||
PowerScheme = '8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure pagefile size is set to 3GB for initial and max settings
|
|
||||||
PageFile Local {
|
|
||||||
InitialSize = 3072
|
|
||||||
MaximumSize = 3072
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($Node.ProxyCert) {
|
|
||||||
CertificateImport Proxy {
|
|
||||||
Username = $Node.Node.ServiceAccount.Username
|
|
||||||
Permission = 'ReadAndExecute'
|
|
||||||
StoreLocation = 'LocalMachine\My'
|
|
||||||
FilePath = $Node.ProxyCert
|
|
||||||
Password = $CertificatePassword
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Node $AllNodes.Where{$_.Role -eq 'Scheduler'}.Nodename {
|
|
||||||
# $CentralNode = $AllNodes.Where{$_.Role -eq 'Central'}.NodeName
|
|
||||||
|
|
||||||
# # Skip kerberos if the installer doesn't exist
|
|
||||||
# if (Test-Path "\\$CentralNode\Clarity\Install\kfw-4.1-amd64.msi") {
|
|
||||||
# Package Kerberos {
|
|
||||||
# Name = 'MIT Kerberos for Windows (64-bit) 4.1.0'
|
|
||||||
# Path = "\\$CentralNode\Clarity\Install\kfw-4.1-amd64.msi"
|
|
||||||
# ProductId = '{AF6E168F-F6FE-4728-8F6E-E3E68F5C1FD3}'
|
|
||||||
# Credential = $Node.ServiceAccount
|
|
||||||
# Ensure = 'Present'
|
|
||||||
# }
|
|
||||||
|
|
||||||
# File krb5.ini {
|
|
||||||
# SourcePath = "\\$CentralNode\Clarity\Install\krb5.ini"
|
|
||||||
# DestinationPath = "$env:PROGRAMDATA\MIT\Kerberos5\krb5.ini"
|
|
||||||
# Type = 'File'
|
|
||||||
# Checksum = 'SHA-1'
|
|
||||||
# Ensure = 'Present'
|
|
||||||
# Credential = $Node.ServiceAccount
|
|
||||||
# DependsOn = '[Package]Kerberos'
|
|
||||||
# }
|
|
||||||
|
|
||||||
# File keytab {
|
|
||||||
# SourcePath = "\\$CentralNode\Clarity\Install\all_keytabs_prod"
|
|
||||||
# DestinationPath = "D:\all_keytabs_prod"
|
|
||||||
# Type = 'Directory'
|
|
||||||
# Checksum = 'SHA-1'
|
|
||||||
# MatchSource = $true
|
|
||||||
# Ensure = 'Present'
|
|
||||||
# Credential = $Node.ServiceAccount
|
|
||||||
# DependsOn = '[Package]Kerberos'
|
|
||||||
# }
|
|
||||||
# }
|
|
||||||
|
|
||||||
# # Skip Cloudera if installer doesn't exist
|
|
||||||
# if (Test-Path "\\$CentralNode\Clarity\Install\ClouderaImpalaODBC64.msi") {
|
|
||||||
# Package Cloudera {
|
|
||||||
# Name = 'Cloudera ODBC Driver for Impala'
|
|
||||||
# Path = "\\$CentralNode\Clarity\Install\ClouderaImpalaODBC64.msi"
|
|
||||||
# ProductId = '{111ADFD9-99CC-4695-8F48-44A5B397249D}'
|
|
||||||
# Credential = $Node.ServiceAccount
|
|
||||||
# Ensure = 'Present'
|
|
||||||
# }
|
|
||||||
|
|
||||||
# # Create ODBC DSN for Cloudera
|
|
||||||
# OdbcDsn Cloudera {
|
|
||||||
# DsnName = 'Impala PROD'
|
|
||||||
# DsnType = 'System'
|
|
||||||
# DriverName = 'Cloudera ODBC Driver for Impala'
|
|
||||||
# Platform = '64-Bit'
|
|
||||||
# Attribute = @{
|
|
||||||
# AllowHostNameCNMismatch = "0"
|
|
||||||
# AllowSelfSignedServerCert = "0"
|
|
||||||
# AsyncExecPollInterval = "10"
|
|
||||||
# AuthMech = "1"
|
|
||||||
# AutoReconnect = "1"
|
|
||||||
# CurrentSchemaRestrictedMetadata = "0"
|
|
||||||
# DefaultKeytabFile = "D:\all_keytabs_prod\pbgxsprd_dsccr001d01i1p.eur.nsroot.net.keytab"
|
|
||||||
# DelegateKrbCreds = "0"
|
|
||||||
# DelegationUID = ""
|
|
||||||
# DESCRIPTION = ""
|
|
||||||
# EnableSimulatedTransactions = "0"
|
|
||||||
# Host = "dsccr001d01i1p.eur.nsroot.net"
|
|
||||||
# KrbFQDN = "dsccr001d01i1p.eur.nsroot.net"
|
|
||||||
# KrbRealm = "EURUXPROD.DYN.NSROOT.NET"
|
|
||||||
# KrbServiceName = "impala"
|
|
||||||
# Port = "21050"
|
|
||||||
# RowsFetchedPerBlock = "10000"
|
|
||||||
# Schema = ""
|
|
||||||
# ServicePrincipalCanonicalization = "0"
|
|
||||||
# SocketTimeout = "30"
|
|
||||||
# SSL = "0"
|
|
||||||
# StringColumnLength = "32767"
|
|
||||||
# TrustedCerts = "C:\Program Files\Cloudera ODBC Driver for Impala\lib\cacerts.pem"
|
|
||||||
# TSaslTransportBufSize = "1000000"
|
|
||||||
# UID = "pbgxsprd/dsccr001d01i1p.eur.nsroot.net"
|
|
||||||
# UPNKeytabMappingFile = ""
|
|
||||||
# UseKeytab = "1"
|
|
||||||
# UseNativeQuery = "0"
|
|
||||||
# UseOnlySSPI = "0"
|
|
||||||
# UseSASL = "1"
|
|
||||||
# UseSQLUnicodeTypes = "0"
|
|
||||||
# UseSystemTrustStore = "0"
|
|
||||||
# LCaseSspKeyName = ""
|
|
||||||
# CheckCertRevocation = "1"
|
|
||||||
# }
|
|
||||||
# DependsOn = '[Package]Cloudera'
|
|
||||||
# }
|
|
||||||
# }
|
|
||||||
# }
|
|
||||||
|
|
||||||
# Configuration for Central node only
|
|
||||||
Node $AllNodes.Where{$_.Role -eq 'Central'}.NodeName {
|
|
||||||
NTFSAccess QlikProgramData {
|
|
||||||
Path = "$env:ProgramData\Qlik"
|
|
||||||
Permission = 'FullControl'
|
|
||||||
Username = $Node.ServiceAccount.Username
|
|
||||||
}
|
|
||||||
|
|
||||||
File QlikClusterRoot
|
|
||||||
{
|
|
||||||
Type = 'Directory'
|
|
||||||
DestinationPath = $ClusterLocalPath
|
|
||||||
Ensure = 'Present'
|
|
||||||
}
|
|
||||||
|
|
||||||
NTFSAccess QlikClusterRoot {
|
|
||||||
Path = $ClusterLocalPath
|
|
||||||
Permission = 'FullControl'
|
|
||||||
Username = $Node.ServiceAccount.Username
|
|
||||||
}
|
|
||||||
|
|
||||||
$ConfigurationData.NonNodeData.Shares.Cluster.Full.ForEach{
|
|
||||||
NTFSAccess "QlikClusterRoot-$($_)" {
|
|
||||||
Path = $ClusterLocalPath
|
|
||||||
Permission = 'FullControl'
|
|
||||||
Username = $_
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# xSmbShare QlikClusterShare
|
|
||||||
# {
|
|
||||||
# Path = $ClusterLocalPath
|
|
||||||
# Name = 'Clarity'
|
|
||||||
# FullAccess = @($ConfigurationData.NonNodeData.Shares.Cluster.Full |?{$_}) +
|
|
||||||
# $Node.ServiceAccount.GetNetworkCredential().UserName
|
|
||||||
# Ensure = 'Present'
|
|
||||||
# DependsOn = '[File]QlikClusterRoot'
|
|
||||||
# }
|
|
||||||
|
|
||||||
# Install Sense as a Central node
|
|
||||||
QlikPackage Central
|
|
||||||
{
|
|
||||||
Name = $ConfigurationData.NonNodeData.Sense.ReleaseName
|
|
||||||
Setup = "$ClusterLocalPath\Install\Qlik_Sense_setup.exe"
|
|
||||||
Patch = "$(if(Test-Path "$ClusterLocalPath\Install\Qlik_Sense_update.exe"){"$ClusterLocalPath\Install\Qlik_Sense_update.exe"})"
|
|
||||||
ServiceCredential = $Node.ServiceAccount
|
|
||||||
RootDir = "\\$($Node.Hostname)\Clarity"
|
|
||||||
DbSuperUserPassword = $DbRepoUser
|
|
||||||
DbCredential = $DbRepoUser
|
|
||||||
CreateCluster = $true
|
|
||||||
InstallLocalDb = $true
|
|
||||||
ConfigureDbListener = $true
|
|
||||||
Hostname = $Node.Hostname
|
|
||||||
ConfigureLogging = $true
|
|
||||||
SetupLocalLoggingDb = $true
|
|
||||||
QLogsWriterPassword = $DbRepoUser
|
|
||||||
QLogsReaderPassword = $DbRepoUser
|
|
||||||
QLogsHostname = $Node.Hostname
|
|
||||||
QLogsPort = 4432
|
|
||||||
Ensure = 'Present'
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[NTFSAccess]QlikProgramData', '[xSmbShare]QlikClusterShare'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure QRD service is set for manual startup
|
|
||||||
# and is running as Sense service account
|
|
||||||
xService QRD {
|
|
||||||
Name = 'QlikSenseRepositoryDatabase'
|
|
||||||
StartupType = 'Manual'
|
|
||||||
State = 'Running'
|
|
||||||
Credential = $Node.ServiceAccount
|
|
||||||
DependsOn = '[QlikPackage]Central'
|
|
||||||
}
|
|
||||||
|
|
||||||
xService QRS {
|
|
||||||
Name = 'QlikSenseRepositoryService'
|
|
||||||
StartupType = 'Manual'
|
|
||||||
State = 'Running'
|
|
||||||
DependsOn = '[xService]QRD'
|
|
||||||
}
|
|
||||||
|
|
||||||
QlikConnect SenseCentral
|
|
||||||
{
|
|
||||||
Computername = $Node.Hostname
|
|
||||||
Username = $Node.AdminAccount.UserName
|
|
||||||
TrustAllCerts = $true
|
|
||||||
RetryDelay = 15
|
|
||||||
MaxRetries = 40
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[xService]QRS'
|
|
||||||
}
|
|
||||||
|
|
||||||
QlikLicense SiteLicense
|
|
||||||
{
|
|
||||||
Serial = $ConfigurationData.NonNodeData.Sense.License.Serial
|
|
||||||
Control = $ConfigurationData.NonNodeData.Sense.License.Control
|
|
||||||
Name = $ConfigurationData.NonNodeData.Sense.License.Name
|
|
||||||
Organization = $ConfigurationData.NonNodeData.Sense.License.Organization
|
|
||||||
Lef = $ConfigurationData.NonNodeData.Sense.License.Lef
|
|
||||||
Ensure = "Present"
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = "[QlikConnect]SenseCentral"
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure accounts listed in the environment data file are RootAdmin
|
|
||||||
$ConfigurationData.NonNodeData.Sense.RootAdmin.foreach{
|
|
||||||
QlikUser $_ {
|
|
||||||
UserId = $_.Substring($_.IndexOf('\') + 1)
|
|
||||||
UserDirectory = $_.Substring(0, $_.IndexOf('\'))
|
|
||||||
Roles = 'RootAdmin'
|
|
||||||
Ensure = 'Present'
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[QlikLicense]SiteLicense'
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
SenseCertificate Windows {
|
|
||||||
MachineName = $Node.NodeName
|
|
||||||
Password = $certPassword
|
|
||||||
IncludeSecretKey = $true
|
|
||||||
ExportFormat = 'Windows'
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[QlikLicense]SiteLicense'
|
|
||||||
}
|
|
||||||
|
|
||||||
SenseCertificate Pem {
|
|
||||||
MachineName = $Node.NodeName
|
|
||||||
Password = $certPassword
|
|
||||||
IncludeSecretKey = $true
|
|
||||||
ExportFormat = 'Pem'
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[QlikLicense]SiteLicense'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Copy Sense server certificate to PostgreSQL directory
|
|
||||||
File Postgres_cert {
|
|
||||||
SourcePath = "$env:PROGRAMDATA\Qlik\Sense\Repository\Exported Certificates\.Local Certificates\server.pem"
|
|
||||||
DestinationPath = "$env:PROGRAMDATA\Qlik\Sense\Repository\PostgreSQL\9.6\server.pem"
|
|
||||||
Type = 'File'
|
|
||||||
Ensure = 'Present'
|
|
||||||
DependsOn = '[xService]QRS'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Copy Sense server key to PostgreSQL directory
|
|
||||||
File Postgres_key {
|
|
||||||
SourcePath = "$env:PROGRAMDATA\Qlik\Sense\Repository\Exported Certificates\.Local Certificates\server_key.pem"
|
|
||||||
DestinationPath = "$env:PROGRAMDATA\Qlik\Sense\Repository\PostgreSQL\9.6\server_key.pem"
|
|
||||||
Type = 'File'
|
|
||||||
Ensure = 'Present'
|
|
||||||
DependsOn = '[xService]QRS'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure SSL settings are configured in postgresql.conf
|
|
||||||
# and max connections is set to node count * 100
|
|
||||||
# Ensure Postgres access control is configured for SSL only
|
|
||||||
Postgres Local {
|
|
||||||
SSL = $true
|
|
||||||
SSLCiphers = 'DEFAULT:!LOW:!EXP:!eNULL:!aNULL:!MD5:!RC2:!RC4:!DES:@STRENGTH'
|
|
||||||
CertFile = 'server.pem'
|
|
||||||
KeyFile = 'server_key.pem'
|
|
||||||
MaxConnections = $AllNodes.Count * 100
|
|
||||||
HostAccess = @(
|
|
||||||
'hostssl all all all md5',
|
|
||||||
'host all all all md5'
|
|
||||||
)
|
|
||||||
IdleTransactionTimeout = '5min'
|
|
||||||
Credential = $DbSuperUser
|
|
||||||
DependsOn = '[File]Postgres_cert', '[File]Postgres_key'
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Configuration for Rim nodes only (not Central)
|
|
||||||
Node $AllNodes.Where{$_.Role -ne 'Central'}.NodeName {
|
|
||||||
$CentralNode = $AllNodes.Where{$_.Role -eq 'Central'}.Hostname
|
|
||||||
|
|
||||||
# Copy setup file to local disk
|
|
||||||
File SenseSetup {
|
|
||||||
SourcePath = "\\$CentralNode\Clarity\Install\Qlik_Sense_setup.exe"
|
|
||||||
DestinationPath = "C:\Install\Qlik_Sense_setup.exe"
|
|
||||||
Type = 'File'
|
|
||||||
Checksum = 'SHA-1'
|
|
||||||
Ensure = 'Present'
|
|
||||||
Credential = $Node.ServiceAccount
|
|
||||||
}
|
|
||||||
|
|
||||||
# If patch file exists copy it to local disk
|
|
||||||
if (Test-Path "$ClusterLocalPath\Install\Qlik_Sense_update.exe") {
|
|
||||||
$SenseUpdate = "C:\Install\Qlik_Sense_update.exe"
|
|
||||||
File SenseUpdate {
|
|
||||||
SourcePath = "\\$CentralNode\Clarity\Install\Qlik_Sense_update.exe"
|
|
||||||
DestinationPath = $SenseUpdate
|
|
||||||
Type = 'File'
|
|
||||||
Checksum = 'SHA-1'
|
|
||||||
Ensure = 'Present'
|
|
||||||
Credential = $Node.ServiceAccount
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Pause execution if central node is not ready
|
|
||||||
WaitForSense $CentralNode {
|
|
||||||
ComputerName = $CentralNode
|
|
||||||
RetryDelay = 60
|
|
||||||
MaxRetries = 30
|
|
||||||
SkipVerify = $true
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
}
|
|
||||||
|
|
||||||
# Install Qlik Sense as Rim node
|
|
||||||
# and join existing cluster (including registering with Central)
|
|
||||||
QlikRimNode $Node.NodeName {
|
|
||||||
SenseService = $Node.ServiceAccount
|
|
||||||
ProductName = $ConfigurationData.NonNodeData.Sense.ReleaseName
|
|
||||||
SetupPath = 'C:\Install\Qlik_Sense_setup.exe'
|
|
||||||
PatchPath = $SenseUpdate
|
|
||||||
Hostname = $Node.Hostname
|
|
||||||
Name = $Node.Name
|
|
||||||
CentralNode = $CentralNode
|
|
||||||
DbCredential = $DbRepoUser
|
|
||||||
Engine = ($Node.Role -match 'Engine' -or $Node.Role -eq 'Scheduler')
|
|
||||||
Printing = ($Node.Role -match 'Engine')
|
|
||||||
Proxy = ($Node.Role -match 'Proxy')
|
|
||||||
Scheduler = ($Node.Role -eq 'Scheduler')
|
|
||||||
ManageServices = $false
|
|
||||||
ManageFirewall = $false
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = @("[WaitForSense]$CentralNode", '[File]SenseSetup') + $(if($SenseUpdate){'[File]SenseUpdate'})
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Configuration for all nodes
|
|
||||||
Node $AllNodes.NodeName {
|
|
||||||
# Ensure Sense program data is shared as Sense
|
|
||||||
# with access levels defined in environment data file
|
|
||||||
xSmbShare Sense {
|
|
||||||
Path = "$env:ProgramData\Qlik\Sense"
|
|
||||||
Name = 'Sense'
|
|
||||||
FullAccess = @($ConfigurationData.NonNodeData.Shares.Sense.Full |?{$_}) +
|
|
||||||
$Node.ServiceAccount.GetNetworkCredential().UserName
|
|
||||||
ReadAccess = $ConfigurationData.NonNodeData.Shares.Sense.Read
|
|
||||||
Ensure = 'Present'
|
|
||||||
DependsOn = if($Node.Role -eq 'Central'){'[Postgres]Local'}else{"[QlikRimNode]$($Node.Nodename)"}
|
|
||||||
}
|
|
||||||
|
|
||||||
Group SenseServiceUsers {
|
|
||||||
GroupName = 'Qlik Sense Service Users'
|
|
||||||
MembersToInclude = $Node.ServiceAccount.UserName
|
|
||||||
PsDscRunAsCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[xSmbShare]Sense'
|
|
||||||
}
|
|
||||||
|
|
||||||
Group PerfMonUsers {
|
|
||||||
GroupName = 'Performance Monitor Users'
|
|
||||||
MembersToInclude = $Node.ServiceAccount.UserName
|
|
||||||
PsDscRunAsCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[xSmbShare]Sense'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Delete the examples directory as required by security audit
|
|
||||||
File Examples {
|
|
||||||
DestinationPath = 'C:\ProgramData\Qlik\Examples'
|
|
||||||
Type = 'Directory'
|
|
||||||
Ensure = 'Absent'
|
|
||||||
Force = $true
|
|
||||||
Credential = $Node.ServiceAccount
|
|
||||||
DependsOn = '[xSmbShare]Sense'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Remove HTTP server header for DotNot web servers (Sense Proxy)
|
|
||||||
HTTP Server {
|
|
||||||
DisableServerHeader = 2
|
|
||||||
DependsOn = '[xSmbShare]Sense'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure all Sense services are configured for manual startup
|
|
||||||
@(
|
|
||||||
'QlikSenseEngineService',
|
|
||||||
'QlikSensePrintingService',
|
|
||||||
'QlikSenseProxyService',
|
|
||||||
'QlikSenseRepositoryService',
|
|
||||||
'QlikSenseSchedulerService',
|
|
||||||
'QlikSenseServiceDispatcher'
|
|
||||||
).ForEach{
|
|
||||||
xService $_ {
|
|
||||||
Name = $_
|
|
||||||
StartupType = 'Manual'
|
|
||||||
State = 'Running'
|
|
||||||
DependsOn = '[Group]SenseServiceUsers', '[Group]PerfMonUsers'
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure Qlik logging service is stopped and disabled
|
|
||||||
xService QlikLogging {
|
|
||||||
Name = 'QlikLoggingService'
|
|
||||||
StartupType = 'Disabled'
|
|
||||||
State = 'Stopped'
|
|
||||||
DependsOn = '[xService]QlikSenseRepositoryService'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Wait for Sense services to be ready by checking service status on central node
|
|
||||||
WaitForSense Repository {
|
|
||||||
ComputerName = $AllNodes.Where{$_.Role -eq 'Central'}.Hostname
|
|
||||||
Node = $Node.Hostname
|
|
||||||
MaxRetries = 20
|
|
||||||
RetryDelay = 30
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[xService]QlikSenseRepositoryService'
|
|
||||||
}
|
|
||||||
|
|
||||||
if($Node.ProxyCert) {
|
|
||||||
$Thumbprint = (Get-PfxData -FilePath $Node.ProxyCert).EndEntityCertificates.ThumbPrint
|
|
||||||
}
|
|
||||||
# Ensure SSL certificate thumbprint is configured for Proxy service
|
|
||||||
QlikProxy Local {
|
|
||||||
Node = $Node.Hostname
|
|
||||||
SslBrowserCertificateThumbprint = $Thumbprint
|
|
||||||
PsDscRunAsCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[WaitForSense]Repository'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure default virtual proxies are configured to load balance to engine nodes
|
|
||||||
# and host names defined in environment data file are in whitelist
|
|
||||||
QlikVirtualProxy Default {
|
|
||||||
Description = "$($Node.Name) Proxy (Default)"
|
|
||||||
Prefix = '/'
|
|
||||||
SessionCookieHeaderName = 'X-Qlik-Session'
|
|
||||||
LoadBalancingServerNodes = "engineEnabled eq true and schedulerEnabled eq false"
|
|
||||||
WebSocketCrossOriginWhitelist = $ConfigurationData.NonNodeData.Sense.HostWhitelist
|
|
||||||
AdditionalResponseHeaders = @"
|
|
||||||
X-XSS-Protection: 1
|
|
||||||
X-Frame-Options: deny
|
|
||||||
Content-Security-Policy: frame-ancestors 'none'
|
|
||||||
Strict-Transport-Security: max-age=86400; includeSubDomains
|
|
||||||
X-Content-Type-Options: nosniff
|
|
||||||
"@
|
|
||||||
Ensure = 'Present'
|
|
||||||
PsDscRunasCredential = $Node.AdminAccount
|
|
||||||
DependsOn = '[WaitForSense]Repository'
|
|
||||||
}
|
|
||||||
|
|
||||||
# Ensure QRS connection string is configured for SSL
|
|
||||||
# and is set to use TLS 1.2 only
|
|
||||||
# SenseRepository Postgres {
|
|
||||||
# SSLMode = 'Require'
|
|
||||||
# TLSProtocol = '1.3'
|
|
||||||
# PostgresCommandTimeout = 0
|
|
||||||
# DependsOn = '[WaitForSense]Repository'
|
|
||||||
# }
|
|
||||||
|
|
||||||
# $CentralNode = $AllNodes.Where{$_.Role -eq 'Central'}.NodeName
|
|
||||||
# $NodeSetup = @(Get-ChildItem "$ClusterLocalPath\Install\node-*.msi")[0].Name
|
|
||||||
# # Upgrade the version of node js used by the Sense service dispatcher
|
|
||||||
# if ($NodeSetup) {
|
|
||||||
# Package NodeJS {
|
|
||||||
# Name = 'Node.js'
|
|
||||||
# Path = "\\$CentralNode\Clarity\Install\$NodeSetup"
|
|
||||||
# ProductId = '{A6606125-61E2-43C3-BFCF-0E571EC56656}'
|
|
||||||
# Arguments = 'INSTALLDIR="C:\Program Files\Qlik\Sense\ServiceDispatcher\Node" REBOOT=ReallySuppress /norestart'
|
|
||||||
# Credential = $Node.ServiceAccount
|
|
||||||
# Ensure = 'Present'
|
|
||||||
# DependsOn = '[QlikProxy]Local', '[QlikVirtualProxy]Default'
|
|
||||||
# }
|
|
||||||
# }
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,94 +0,0 @@
|
|||||||
@{
|
|
||||||
AllNodes = @(
|
|
||||||
@{
|
|
||||||
NodeName = 'sense0'
|
|
||||||
Hostname = 'sense0'
|
|
||||||
Name = 'Central'
|
|
||||||
Role = "Central"
|
|
||||||
ConcurrentTasks = 10
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense1'
|
|
||||||
Hostname = 'sense1'
|
|
||||||
Name = 'Scheduler 1'
|
|
||||||
Role = "Scheduler"
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense2'
|
|
||||||
Hostname = 'sense2'
|
|
||||||
Name = 'Scheduler 2'
|
|
||||||
Role = "Scheduler"
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense3'
|
|
||||||
Hostname = 'sense3'
|
|
||||||
Name = 'Engine 1'
|
|
||||||
Role = "Engine"
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense4'
|
|
||||||
Hostname = 'sense4'
|
|
||||||
Name = 'Engine 2'
|
|
||||||
Role = "Engine"
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense5'
|
|
||||||
Hostname = 'sense5'
|
|
||||||
Name = 'Engine 3'
|
|
||||||
Role = "Engine"
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense6'
|
|
||||||
Hostname = 'sense6'
|
|
||||||
Name = 'Proxy 1'
|
|
||||||
Role = "Proxy"
|
|
||||||
},
|
|
||||||
@{
|
|
||||||
NodeName = 'sense7'
|
|
||||||
Hostname = 'sense7'
|
|
||||||
Name = 'Proxy 2'
|
|
||||||
Role = "Proxy"
|
|
||||||
}
|
|
||||||
)
|
|
||||||
NonNodeData = @{
|
|
||||||
Thumprint = ''
|
|
||||||
Sense = @{
|
|
||||||
ReleaseName = 'Qlik Sense November 2017'
|
|
||||||
License = @{
|
|
||||||
Serial = '9999000000001292'
|
|
||||||
Control = '16902'
|
|
||||||
Name = 'Qlik'
|
|
||||||
Organization = 'Qlik'
|
|
||||||
Lef = @"
|
|
||||||
9999000000001292
|
|
||||||
PURPOSE;2019 Internal Sense Token Key;;
|
|
||||||
PRODUCTLEVEL;50;;2020-01-31
|
|
||||||
TOKENS;100;;
|
|
||||||
OVERAGE;NO;;
|
|
||||||
TIMELIMIT;;;2020-01-31
|
|
||||||
Z8D9-SZYD-J5RR-D86G-2M4L
|
|
||||||
"@
|
|
||||||
}
|
|
||||||
RootAdmin = @(
|
|
||||||
|
|
||||||
)
|
|
||||||
HostWhiteList = 'sense0'
|
|
||||||
}
|
|
||||||
Shares = @{
|
|
||||||
Cluster = @{
|
|
||||||
Full = @(
|
|
||||||
'qlik'
|
|
||||||
)
|
|
||||||
Read = @()
|
|
||||||
}
|
|
||||||
Sense = @{
|
|
||||||
Full = @(
|
|
||||||
'qlik'
|
|
||||||
)
|
|
||||||
Read = @(
|
|
||||||
'guest'
|
|
||||||
)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,122 +0,0 @@
|
|||||||
Configuration Main {
|
|
||||||
Param (
|
|
||||||
[string]$SenseSetupUri = "https://da3hntz84uekx.cloudfront.net/QlikSense/11.24/0/_MSI/Qlik_Sense_setup.exe",
|
|
||||||
[string]$SenseUpdateUri = "https://da3hntz84uekx.cloudfront.net/QlikSense/11.24/1/_MSI/Qlik_Sense_update.exe",
|
|
||||||
[string]$DownloadPath = $env:temp,
|
|
||||||
[PSCredential]$SenseService,
|
|
||||||
[Parameter(ParameterSetName = "Central")]
|
|
||||||
[PSCredential]$QlikAdmin,
|
|
||||||
[string]$ClusterShareHost,
|
|
||||||
[string]$Hostname,
|
|
||||||
|
|
||||||
[Parameter(ParameterSetName = "Central")]
|
|
||||||
$LicenseSerial = $ConfigurationData.NonNodeData.License.Serial,
|
|
||||||
[Parameter(ParameterSetName = "Central")]
|
|
||||||
$LicenseControl = $ConfigurationData.NonNodeData.License.Control,
|
|
||||||
[Parameter(ParameterSetName = "Central")]
|
|
||||||
$LicenseOrg = $ConfigurationData.NonNodeData.License.Organization,
|
|
||||||
[Parameter(ParameterSetName = "Central")]
|
|
||||||
$LicenseName = $ConfigurationData.NonNodeData.License.Name,
|
|
||||||
[Parameter(ParameterSetName = "Central", Mandatory = $false)]
|
|
||||||
$LicenseLef = $ConfigurationData.NonNodeData.License.Lef,
|
|
||||||
|
|
||||||
[Parameter(ParameterSetName = "RimNode")]
|
|
||||||
$CentralNode,
|
|
||||||
[Parameter(ParameterSetName = "RimNode")]
|
|
||||||
[ValidateSet("Proxy", "Engine", "ProxyEngine", "Scheduler", "All")]
|
|
||||||
$NodeType = "All"
|
|
||||||
)
|
|
||||||
|
|
||||||
Import-DscResource -ModuleName PSDesiredStateConfiguration, xPSDesiredStateConfiguration, QlikResources
|
|
||||||
|
|
||||||
Node localhost
|
|
||||||
{
|
|
||||||
User QlikAdmin
|
|
||||||
{
|
|
||||||
UserName = $QlikAdmin.GetNetworkCredential().UserName
|
|
||||||
Password = $QlikAdmin
|
|
||||||
FullName = 'QlikAdmin'
|
|
||||||
PasswordChangeRequired = $false
|
|
||||||
PasswordNeverExpires = $true
|
|
||||||
Ensure = 'Present'
|
|
||||||
}
|
|
||||||
|
|
||||||
User SenseService
|
|
||||||
{
|
|
||||||
UserName = $SenseService.GetNetworkCredential().UserName
|
|
||||||
Password = $SenseService
|
|
||||||
FullName = 'Qlik Sense Service Account'
|
|
||||||
PasswordChangeNotAllowed = $true
|
|
||||||
PasswordChangeRequired = $false
|
|
||||||
PasswordNeverExpires = $true
|
|
||||||
Ensure = 'Present'
|
|
||||||
}
|
|
||||||
|
|
||||||
Group Administrators
|
|
||||||
{
|
|
||||||
GroupName = 'Administrators'
|
|
||||||
MembersToInclude = $QlikAdmin.GetNetworkCredential().UserName, $SenseService.GetNetworkCredential().UserName
|
|
||||||
}
|
|
||||||
|
|
||||||
File DownloadPath
|
|
||||||
{
|
|
||||||
Type = 'Directory'
|
|
||||||
DestinationPath = Join-Path -Path $DownloadPath -ChildPath $Name
|
|
||||||
Ensure = 'Present'
|
|
||||||
}
|
|
||||||
|
|
||||||
$SenseSetupPath = Join-Path -Path $DownloadPath -ChildPath $SenseSetupUri.Substring($SenseSetupUri.LastIndexOf('/') + 1)
|
|
||||||
xRemoteFile SenseSetup
|
|
||||||
{
|
|
||||||
DestinationPath = $SenseSetupPath
|
|
||||||
Uri = $SenseSetupUri
|
|
||||||
MatchSource = $false
|
|
||||||
}
|
|
||||||
|
|
||||||
$SenseUpdatePath = Join-Path -Path $DownloadPath -ChildPath $SenseUpdateUri.Substring($SenseUpdateUri.LastIndexOf('/') + 1)
|
|
||||||
xRemoteFile SenseUpdate
|
|
||||||
{
|
|
||||||
DestinationPath = $SenseUpdatePath
|
|
||||||
Uri = $SenseUpdateUri
|
|
||||||
MatchSource = $false
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($PsCmdlet.ParameterSetName -EQ 'Central') {
|
|
||||||
QlikCentral CentralNode
|
|
||||||
{
|
|
||||||
SenseService = $SenseService
|
|
||||||
QlikAdmin = $QlikAdmin
|
|
||||||
ProductName = "Qlik Sense November 2017 Patch 1"
|
|
||||||
SetupPath = $SenseSetupPath
|
|
||||||
PatchPath = $SenseUpdatePath
|
|
||||||
Hostname = $Hostname
|
|
||||||
ClusterShareHost = $ClusterShareHost
|
|
||||||
License = @{
|
|
||||||
Serial = $LicenseSerial
|
|
||||||
Control = $LicenseControl
|
|
||||||
Name = $LicenseName
|
|
||||||
Organization = $LicenseOrg
|
|
||||||
Lef = $LicenseLef
|
|
||||||
}
|
|
||||||
PSDscRunasCredential = $QlikAdmin
|
|
||||||
}
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
QlikRimNode $Hostname
|
|
||||||
{
|
|
||||||
SenseService = $SenseService
|
|
||||||
QlikAdmin = $QlikAdmin
|
|
||||||
ProductName = "Qlik Sense November 2017 Patch 1"
|
|
||||||
SetupPath = $SenseSetupPath
|
|
||||||
PatchPath = $SenseUpdatePath
|
|
||||||
Hostname = $Hostname
|
|
||||||
CentralNode = $CentralNode
|
|
||||||
Proxy = (@('Proxy', 'ProxyEngine', 'All') -contains $NodeType)
|
|
||||||
Engine = (@('Engine', 'ProxyEngine', 'Scheduler', 'All') -contains $NodeType)
|
|
||||||
Printing = (@('Engine', 'ProxyEngine', 'All') -contains $NodeType)
|
|
||||||
Scheduler = (@('Scheduler', 'All') -contains $NodeType)
|
|
||||||
PSDscRunasCredential = $QlikAdmin
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
# Push-Location ~/Downloads
|
|
||||||
# Invoke-WebRequest -Uri https://da3hntz84uekx.cloudfront.net/QlikSense/13.95/0/_MSI/Qlik_Sense_setup.exe -OutFile .\binaries\Qlik_Sense_setup.exe
|
|
||||||
# Invoke-WebRequest -Uri https://da3hntz84uekx.cloudfront.net/QlikSense/13.95/1/_MSI/Qlik_Sense_update.exe -OutFile .\binaries\Qlik_Sense_update.exe
|
|
||||||
|
|
||||||
Get-PackageProvider -Name NuGet -ForceBootstrap
|
|
||||||
Install-Module -Name GoogleCloud -Force
|
|
||||||
Install-Module -Name xPSDesiredStateConfiguration -Force
|
|
||||||
Install-Module -Name xNetworking -Force
|
|
||||||
Install-Module -Name xSmbShare -Force
|
|
||||||
Install-Module -Name Qlik-Cli -Force
|
|
||||||
Install-Module -Name QlikResources -Force
|
|
||||||
|
|
||||||
# $bucket = "qliksense"
|
|
||||||
# New-GcsObject -Bucket $bucket -Folder ".\binaries" -ObjectNamePrefix "binaries" -Force
|
|
||||||
|
|
||||||
# Pop-Location
|
|
||||||
24
bt-autoscaler/terraform/roots/scripts/spc.xml
Normal file
24
bt-autoscaler/terraform/roots/scripts/spc.xml
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
<?xml version="1.0"?>
|
||||||
|
<SharedPersistenceConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
|
||||||
|
<DbUserName>qliksenserepository</DbUserName>
|
||||||
|
<DbUserPassword>Qlik1234!</DbUserPassword>
|
||||||
|
<DbHost>10.54.242.2</DbHost>
|
||||||
|
<DbPort>5432</DbPort>
|
||||||
|
<RootDir>\\10.236.6.170\qlikshare</RootDir>
|
||||||
|
<StaticContentRootDir>\\10.236.6.170\qlikshare\StaticContent</StaticContentRootDir>
|
||||||
|
<ArchivedLogsDir>\\10.236.6.170\qlikshare\ArchivedLogs</ArchivedLogsDir>
|
||||||
|
<AppsDir>\\10.236.6.170\qlikshare\Apps</AppsDir>
|
||||||
|
<CreateCluster>true</CreateCluster>
|
||||||
|
<InstallLocalDb>false</InstallLocalDb>
|
||||||
|
<ConfigureDbListener>false</ConfigureDbListener>
|
||||||
|
<ListenAddresses>*</ListenAddresses>
|
||||||
|
<IpRange>0.0.0.0/0,::/0</IpRange>
|
||||||
|
<MaxConnections>100</MaxConnections>
|
||||||
|
<!-- <JoinCluster>true</JoinCluster> -->
|
||||||
|
<ConfigureLogging>false</ConfigureLogging>
|
||||||
|
<SetupLocalLoggingDb>false</SetupLocalLoggingDb>
|
||||||
|
<QLogsWriterPassword>Qlik1234!</QLogsWriterPassword>
|
||||||
|
<QLogsReaderPassword>Qlik1234!</QLogsReaderPassword>
|
||||||
|
<QLogsHostname>10.54.242.2</QLogsHostname>
|
||||||
|
<QLogsPort>5432</QLogsPort>
|
||||||
|
</SharedPersistenceConfiguration>
|
||||||
@@ -1,6 +1,13 @@
|
|||||||
#!/usr/bin/env pwsh
|
#!/usr/bin/env pwsh
|
||||||
# Install NFS Client on Windows via PS
|
# Install NFS Client on Windows via PS
|
||||||
#
|
#
|
||||||
|
|
||||||
|
# Wait for bootstrap.ps1 to finish before proceeding.
|
||||||
|
# $bootScript = "bootstrap.ps1"
|
||||||
|
# Wait-Process -Name $bootScript -ErrorAction SilentlyContinue -Timeout 1200
|
||||||
|
|
||||||
|
# Enable NFS Client, set Anon user to UID:GID 0 == root. Restart service.
|
||||||
|
Write-Host -Message "<---- Installing NFS"
|
||||||
Install-WindowsFeature -Name NFS-Client
|
Install-WindowsFeature -Name NFS-Client
|
||||||
New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
|
New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
|
||||||
-Name "AnonymousUid" -Value "0" -PropertyType DWORD
|
-Name "AnonymousUid" -Value "0" -PropertyType DWORD
|
||||||
@@ -8,3 +15,8 @@ New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Def
|
|||||||
-Name "AnonymousGid" -Value "0" -PropertyType DWORD
|
-Name "AnonymousGid" -Value "0" -PropertyType DWORD
|
||||||
nfsadmin client stop
|
nfsadmin client stop
|
||||||
nfsadmin client start
|
nfsadmin client start
|
||||||
|
|
||||||
|
# & E:\deploy\binaries\Qlik_Sense_setup.exe -s -l E:\deploy\deploy.log spc="E:\deploy\scripts\spc.xml" installdir="E:\deploy\Qlik" userwithdomain="central-b445\qservice" userpassword="Qlik1234!" dbpassword="Qlik1234!" accepteula=1 skipvalidation=1 bundleinstall=1 skipdbconfig=1
|
||||||
|
|
||||||
|
Write-Host "<---- Installing QSEoW"
|
||||||
|
Invoke-Command -ScriptBlock {Start-Process -FilePath "E:\deploy\binaries\Qlik_Sense_setup.exe" -ArgumentList "-s -log E:\deploy\deploy.log accepteula=1 installdir=E:\deploy\Qlik dbpassword=Qlik1234! hostname=$($env:computername) userwithdomain=$($env:computername)\qservice password=Qlik1234! bundleinstall=dashboard,visualization spc=E:\deploy\scripts\spc.xml" -Wait -PassThru} | Out-Null
|
||||||
|
|||||||
Reference in New Issue
Block a user