For the complete documentation index, see llms.txt. This page is also available as Markdown.

provision

Provision a complete Rumi private cloud on AWS — network infrastructure, DNS, and all platform services (Jump, Admin, Monitor, and optionally a message broker).

Syntax

rumi cloud aws provision \
  --profile <profile> \
  --name <name> \
  --key-pair <keypair> \
  [options]

Options

Option
Short
Description
Default

--profile

-p

AWS profile to use

Required

--region

-r

AWS region

us-east-1

--name

-n

Name of the private cloud

Required

--key-pair

-k

The network's EC2 key pair

Required

--addr

-h

Address of the private cloud's network in the form x.y

10.0

--message-broker

-m

Messaging broker to provision (solace, kafka, activemq)

null (no broker)

--firewall-ports

-o

Comma-separated set of ports to open in the jump server's firewall

null

--admin-proxy-server

-a

nginx server_name on the jump server for the Admin service

null

--admin-proxy-port

-b

Port nginx listens on on the jump server for the Admin service

0 (no proxy)

--discovery-proxy-server

-c

nginx server_name on the jump server for the Discovery service

null

--discovery-proxy-port

-d

Port nginx listens on on the jump server for the Discovery service

0 (no proxy)

--monitor-proxy-server

-e

nginx server_name on the jump server for the Monitor service

null

--monitor-proxy-port

-f

Port nginx listens on on the jump server for the Monitor service

0 (no proxy)

--broker-proxy-server

-g

nginx server_name on the jump server for the message broker

null

--broker-proxy-port

-i

Port nginx listens on on the jump server for the message broker

0 (no proxy)

Example

What it does

  1. Creates the network infrastructure (VPC, subnet, security groups, Route 53 hosted zone).

  2. Launches the Jump server and configures it as the bastion.

  3. Launches the Admin and Monitor services and, if requested, the message broker (Solace, Kafka, or ActiveMQ).

  4. Registers DNS entries for each service in the hosted zone.

  5. Optionally configures nginx reverse-proxy entries on the jump server for any of the platform services whose --*-proxy-server / --*-proxy-port flags are set.

See Also

Last updated