hashicorp/boundary-reference-architecture

Stars
211
Rank 186,867 (Top 4 %)
Language HCL
License
Mozilla Public Li...
Created over 4 years ago
Updated 6 months ago

hashicorp/boundary-reference-architecture

hashicorp

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Example reference architecture for a high availability Boundary deployment on AWS.

Boundary Reference Architectures

This repo contains community-supported examples for deploying Boundary on different platforms - including AWS, Microsoft Azure, Google Cloud Platform, Kubernetes, and Docker Compose. Most examples use Terraform for provisioning and configuring Boundary.

If you are looking for a simple example for HCP/OSS Boundary, see the quickstart folder

Disclaimer: the examples in this repository are for demonstration purposes only to convey how to get Boundary up and running on popular cloud and container platforms. They're not officially supported modules or designed to be "production" ready. They're here as a starting point and assume end-users have experience with each example platform.

Contributing

Community contributions to this repository are encouraged and can be added to deployment/ and configuration/.

Contents

deployment/: Contains example configurations for deploying and configuring Boundary.
configuration/: Contains examples for configuring Boundary resources assuming you already have a deployed environment, such as for HCP Boundary and Dev mode.

Reference

terraform

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

vault

A tool for secrets management, encryption as a service, and privileged access management

consul

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

vagrant

Vagrant is a tool for building and distributing development environments.

packer

Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.

nomad

Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.

terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.

raft

Golang implementation of the Raft consensus protocol

serf

Service orchestration and management tool.

hcl

HCL is the HashiCorp configuration language.

go-plugin

Golang plugin system over RPC.

terraform-cdk

Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform

waypoint

A tool to build, deploy, and release any application on any platform.

consul-template

Template rendering, notifier, and supervisor for @HashiCorp Consul and Vault data.

terraform-provider-azurerm

Terraform provider for Azure Resource Manager

otto

Development and deployment made easy.

golang-lru

Golang LRU cache

boundary

Boundary enables identity-based access management for dynamic infrastructure.

memberlist

Golang package for gossip based membership and failure detection

go-memdb

Golang in-memory database built on immutable radix trees

next-mdx-remote

Load mdx content from anywhere through getStaticProps in next.js

terraform-provider-google

Terraform Provider for Google Cloud Platform

go-multierror

A Go (golang) package for representing a list of errors as a single error.

yamux

Golang connection multiplexing library

envconsul

Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.

go-retryablehttp

Retryable HTTP client in Go

terraform-provider-kubernetes

Terraform Kubernetes provider

go-getter

Package for downloading things from a string URL using a variety of protocols.

best-practices

go-version

A Go (golang) library for parsing and verifying versions and version constraints.

go-metrics

A Golang library for exporting performance and runtime metrics to external metrics systems (i.e. statsite, statsd)

setup-terraform

Sets up Terraform CLI in your GitHub Actions workflow.

terraform-guides

Example usage of HashiCorp Terraform

mdns

Simple mDNS client/server library in Golang

terraform-provider-helm

Terraform Helm provider

vault-guides

Example usage of HashiCorp Vault secrets management

go-immutable-radix

An immutable radix tree implementation in Golang

vault-helm

Helm chart to install Vault and other associated components.

terraform-ls

Terraform Language Server

vscode-terraform

HashiCorp Terraform VSCode extension

levant

An open source templating and deployment tool for HashiCorp Nomad jobs

vault-k8s

First-class support for Vault and Kubernetes.

terraform-exec

Terraform CLI commands via Go.

consul-k8s

First-class support for Consul Service Mesh on Kubernetes

terraform-aws-vault

A Terraform Module for how to run Vault on AWS using Terraform and Packer

terraform-github-actions

Terraform GitHub Actions

terraform-provider-vsphere

Terraform Provider for VMware vSphere

raft-boltdb

Raft backend implementation using BoltDB

nextjs-bundle-analysis

A github action that provides detailed bundle analysis on PRs for next.js apps

go-discover

Discover nodes in cloud environments

consul-replicate

Consul cross-DC KV replication daemon.

next-mdx-enhanced

A Next.js plugin that enables MDX pages, layouts, and front matter

docker-vault

Official Docker images for Vault

terraform-provider-kubernetes-alpha

A Terraform provider for Kubernetes that uses dynamic resource types and server-side apply. Supports all Kubernetes resources.

vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.

terraform-k8s

Terraform Cloud Operator for Kubernetes

puppet-bootstrap

A collection of single-file scripts to bootstrap your machines with Puppet.

cap

A collection of authentication Go packages related to OIDC, JWKs, Distributed Claims, LDAP

terraform-provider-vault

Terraform Vault provider

damon

A terminal UI (TUI) for HashiCorp Nomad

nomad-autoscaler

Nomad Autoscaler brings autoscaling to your Nomad workloads.

consul-helm

Helm chart to install Consul and other associated components.

terraform-provider-azuread

Terraform provider for Azure Active Directory

vault-ssh-helper

Vault SSH Agent is used to enable one time keys and passwords

terraform-provider-scaffolding

Quick start repository for creating a Terraform provider

terraform-aws-consul

A Terraform Module for how to run Consul on AWS using Terraform and Packer

docker-consul

Official Docker images for Consul.

nomad-pack

hil

HIL is a small embedded language for string interpolations.

vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.

learn-terraform-provision-eks-cluster

terraform-plugin-sdk

Terraform Plugin SDK enables building plugins (providers) to manage any service providers or custom in-house solutions

terraform-config-inspect

A helper library for shallow inspection of Terraform configurations

hcl2

Former temporary home for experimental new version of HCL

errwrap

Errwrap is a Go (golang) library for wrapping and querying errors.

go-cleanhttp

design-system

Helios Design System

logutils

Utilities for slightly better logging in Go (Golang).

vault-ruby

The official Ruby client for HashiCorp's Vault

vault-rails

A Rails plugin for easily integrating Vault secrets

next-remote-watch

Decorated local server for next.js that enables reloads from remote data changes

waypoint-examples

Example Apps that can be deployed with Waypoint

go-hclog

A common logging package for HashiCorp tools

vault-csi-provider

HashiCorp Vault Provider for Secret Store CSI Driver

nomad-guides

Example usage of HashiCorp Nomad

consul-haproxy

Consul HAProxy connector for real-time configuration

terraform-provider-google-beta

Terraform Provider for Google Cloud Platform (Beta)

consul-esm

External service monitoring for Consul

http-echo

A tiny go web server that echos what you start it with!

terraform-provider-awscc

Terraform AWS Cloud Control provider

terraform-aws-nomad

A Terraform Module for how to run Nomad on AWS using Terraform and Packer

faas-nomad

OpenFaaS plugin for Nomad

go-sockaddr

IP Address/UNIX Socket convenience functions for Go

terraform-foundational-policies-library

Sentinel is a language and framework for policy built to be embedded in existing software to enable fine-grained, logic-based policy decisions. This repository contains a library of Sentinel policies, developed by HashiCorp, that can be consumed directly within the Terraform Cloud platform.

nomad-driver-podman

A nomad task driver plugin for sandboxing workloads in podman containers

vagrant-vmware-desktop

Official provider for VMware desktop products: Fusion, Player, and Workstation.

go-tfe

HCP Terraform/Enterprise API Client/SDK in Golang

nomad-pack-community-registry

A repo for Packs written and maintained by Nomad community members

terraform-plugin-framework

A next-generation framework for building Terraform providers.

vault-plugin-auth-kubernetes

Vault authentication plugin for Kubernetes Service Accounts