Skip to content

Instantly share code, notes, and snippets.

@diatmpravin

diatmpravin/cf-178-deployment.yml

Created December 12, 2014 11:39
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save diatmpravin/f4ad80e4bb732b922d7a to your computer and use it in GitHub Desktop.
Save diatmpravin/f4ad80e4bb732b922d7a to your computer and use it in GitHub Desktop.
Download ZIP
cf-178-deployment.yml
Raw
cf-178-deployment.yml
<%
director_uuid = "09615bb6-cbd8-42d1-89a7-3cf324b5395c"
static_ip = "137.172.74.90"
root_domain = "mycloud1.com"
deployment_name = "cf-178"
cf_release = "178"
protocol = "http"
common_password = "c1oudc0w"
stemcell_name = "bosh-openstack-kvm-ubuntu-trusty-go_agent"
%>
compilation:
cloud_properties:
instance_type: m1.medium
network: cf1
reuse_compilation_vms: true
workers: 3
director_uuid: <%= director_uuid %>
jobs:
- default_networks:
- name: cf1
static_ips: null
instances: 1
name: ha_proxy_z1
networks:
- name: floating
static_ips:
- <%= static_ip %>
- default:
- dns
- gateway
name: cf1
# static_ips: 10.0.1.20
properties:
ha_proxy:
ssl_pem: '
-----BEGIN PRIVATE KEY-----
MIICXQIBAAKBgQDasoyTBxQ2yeFzNry0cc+ovNhndmNnZwCmILuuxYIXhxkCUr9/
Jb5/CawDgV7tkCYD/LCWvl6lFlEzKPQVr4b3nUC6I7XKS3VC3NBYZSF5/G04RpU0
Mq0oPUCaG4UGRs4hVa3UDFGcuF/rOgNks2/YjoN02Im55357r3WZYvN3kQIDAQAB
AoGAa88G81fTBCtDA1vhbIaKWuE1QNOgrxGcxUhvnPlqZxTHJFkMY66EmPV4oYW9
+RhNVTvVBYq092boAnNW1/Xebvrk1SnBDkrLntnGPmExkatOkPTFFlNXfePu6qOJ
ULwYg8rKRwpvLoQXxbzMDXApPBifBNWGHVneGuHLpwPEQgECQQD0IJOecEyorrCR
6+wmJBS/IwqQO0Ooj7kZEg65MHi9exVe+XFvP0lW2NAUsDuBLz79hjslSqIJjRG8
c6q36oqhAkEA5VVeEip+T4DV12I5A5maGexVMeC92K7EGU/H8YhltxVZ/RtNngdT
3r19WeDbDF7R5CJy2f7AYullk3S6fkk28QJBALdEiW1k4rezRMyW7tYHOifvN2vl
gbpWAt/GRZVSxSGB+B4vZq/cM8NlynftgQ5PGJucnGQ3bgN7irgNoTimc2ECQFMX
QBMy5DroAhKcmu2r/IKB90gwFnjosVI+bsIbWkcgbE9hUhj8rK2aWE11Q8hSnpea
x6QmQgxUZiIr+9n/qvECQQDiDIeSmo2mRYsaqr4CQ3Ak+EDjsm9XTpXHuqm+xgFO
iDIeQCWd3/twqdDTR7FaDE7Q0i559u7A1yLumUn8caLF
-----END PRIVATE KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
'
networks:
apps: cf1
router:
servers:
z1: [0.router-z1.cf1.<%= deployment_name %>.microbosh]
z2: []
resource_pool: router_z1
templates:
- name: haproxy
release: cf
- instances: 1
name: nats_z1
networks:
- name: cf1
# static_ips: 10.0.1.22
properties:
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: nats
release: cf
- name: nats_stream_forwarder
release: cf
- instances: 1
name: etcd_z1
networks:
- name: cf1
# static_ips: 10.0.1.28
persistent_disk: 10024
properties:
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: etcd
release: cf
- name: etcd_metrics_server
release: cf
- instances: 1
name: logs_z1
networks:
- name: cf1
# static_ips: 10.0.1.21
persistent_disk: 16384
properties:
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: syslog_aggregator
release: cf
- instances: 1
name: stats_z1
networks:
- name: cf1
properties:
networks:
apps: cf1
resource_pool: small_z1
templates:
- name: collector
release: cf
- instances: 1
name: nfs_z1
networks:
- name: cf1
# static_ips: 10.0.1.23
persistent_disk: 16384
resource_pool: medium_z1
templates:
- name: debian_nfs_server
release: cf
- instances: 1
name: postgres_z1
networks:
- name: cf1
# static_ips: 10.0.1.24
persistent_disk: 10240
resource_pool: medium_z1
templates:
- name: postgres
release: cf
- instances: 1
name: uaa_z1
networks:
- name: cf1
properties:
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: uaa
release: cf
- instances: 1
name: login_z1
networks:
- name: cf1
properties:
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: login
release: cf
- instances: 1
name: api_z1
networks:
- name: cf1
persistent_disk: 0
properties:
metron_agent:
zone: z1
networks:
apps: cf1
nfs_server:
address: null
allow_from_entries:
- 10.0.1.0/24
share: null
resource_pool: large_z1
templates:
- name: cloud_controller_ng
release: cf
- name: metron_agent
release: cf
- instances: 1
name: clock_global
networks:
- name: cf1
persistent_disk: 0
properties:
metron_agent:
zone: z1
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: cloud_controller_clock
release: cf
- name: metron_agent
release: cf
- instances: 1
name: api_worker_z1
networks:
- name: cf1
persistent_disk: 0
properties:
metron_agent:
zone: z1
networks:
apps: cf1
nfs_server:
address: null
allow_from_entries:
- 10.0.1.0/24
share: null
resource_pool: small_z1
templates:
- name: cloud_controller_worker
release: cf
- name: metron_agent
release: cf
- instances: 1
name: hm9000_z1
networks:
- name: cf1
properties:
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: hm9000
release: cf
- instances: 1
name: runner_z1
networks:
- name: cf1
static_ips: null
properties:
metron_agent:
zone: z1
networks:
apps: cf1
management: cf1
resource_pool: runner_z1
templates:
- name: dea_next
release: cf
- name: dea_logging_agent
release: cf
- name: metron_agent
release: cf
update:
max_in_flight: 1
- instances: 1
name: loggregator_z1
networks:
- name: cf1
# static_ips: 10.0.1.26
properties:
loggregator:
zone: z1
networks:
apps: cf1
resource_pool: medium_z1
templates:
- name: loggregator
release: cf
- instances: 1
name: loggregator_trafficcontroller_z1
networks:
- name: cf1
# static_ips: 10.0.1.27
properties:
networks:
apps: cf1
traffic_controller:
zone: z1
resource_pool: small_z1
templates:
- name: loggregator_trafficcontroller
release: cf
- instances: 1
name: router_z1
networks:
- name: cf1
# static_ips: 10.0.1.25
properties:
metron_agent:
zone: z1
networks:
apps: cf1
resource_pool: router_z1
templates:
- name: gorouter
release: cf
- name: metron_agent
release: cf
meta:
environment: cf
releases:
- name: cf
version: <%= cf_release %>
stemcell:
name: <%= stemcell_name %>
version: latest
name: <%= deployment_name %>
networks:
- cloud_properties:
net_id: e996bec4-04fb-45ca-8d58-91a9e17a494e
security_groups:
- cf-public
name: floating
type: vip
- name: cf1
subnets:
- cloud_properties:
net_id: 3483887e-26a5-4b2e-9f08-d0823bce3636
security_groups:
- default
- cf-public
- cf-private
- bosh
- ssh
gateway: 10.0.1.1
name: private
range: 10.0.1.0/24
reserved:
- 10.0.1.20 - 10.0.1.30
# static_ip:
# - 10.0.1.100 - 10.0.1.200
type: manual
properties:
acceptance_tests: null
app_domains:
- <%= root_domain %>
cc:
app_events:
cutoff_age_in_days: 31
app_usage_events:
cutoff_age_in_days: 31
audit_events:
cutoff_age_in_days: 31
billing_event_writing_enabled: true
broker_client_timeout_seconds: 70
buildpacks:
buildpack_directory_key: <%= root_domain %>-cc-buildpacks
cdn: null
fog_connection: null
bulk_api_password: <%= common_password %>
client_max_body_size: 1536M
db_encryption_key: <%= common_password %>
default_app_disk_in_mb: 1024
default_app_memory: 1024
default_buildpacks:
- name: java_buildpack
package: buildpack_java
- name: ruby_buildpack
package: buildpack_ruby
- name: nodejs_buildpack
package: buildpack_nodejs
- name: go_buildpack
package: buildpack_go
- name: python_buildpack
package: buildpack_python
- name: php_buildpack
package: buildpack_php
default_quota_definition: default
default_running_security_groups:
- public_networks
- dns
default_staging_security_groups:
- public_networks
- dns
development_mode: false
diego: false
directories: null
disable_custom_buildpacks: false
droplets:
cdn: null
droplet_directory_key: <%= root_domain %>-cc-droplets
fog_connection: null
external_host: api
install_buildpacks:
- name: java_buildpack
package: buildpack_java
- name: ruby_buildpack
package: buildpack_ruby
- name: nodejs_buildpack
package: buildpack_nodejs
- name: go_buildpack
package: buildpack_go
- name: python_buildpack
package: buildpack_python
- name: php_buildpack
package: buildpack_php
jobs:
app_bits_packer:
timeout_in_seconds: null
app_events_cleanup:
timeout_in_seconds: null
app_usage_events_cleanup:
timeout_in_seconds: null
blobstore_delete:
timeout_in_seconds: null
blobstore_upload:
timeout_in_seconds: null
droplet_deletion:
timeout_in_seconds: null
droplet_upload:
timeout_in_seconds: null
global:
timeout_in_seconds: 14400
model_deletion:
timeout_in_seconds: null
maximum_app_disk_in_mb: 2048
newrelic:
capture_params: false
developer_mode: false
environment_name: cf
license_key: null
monitor_mode: false
transaction_tracer:
enabled: true
record_sql: obfuscated
packages:
app_package_directory_key: <%= root_domain %>-cc-packages
cdn: null
fog_connection: null
max_package_size: 1073741824
quota_definitions:
default:
memory_limit: 10240
non_basic_services_allowed: true
total_routes: 1000
total_services: 100
resource_pool:
cdn: null
fog_connection: null
resource_directory_key: <%= root_domain %>-cc-resources
security_group_definitions:
- name: public_networks
rules:
- destination: 0.0.0.0-9.255.255.255
protocol: all
- destination: 11.0.0.0-169.253.255.255
protocol: all
- destination: 169.255.0.0-172.15.255.255
protocol: all
- destination: 172.32.0.0-192.167.255.255
protocol: all
- destination: 192.169.0.0-255.255.255.255
protocol: all
- name: dns
rules:
- destination: 0.0.0.0/0
ports: "53"
protocol: tcp
- destination: 0.0.0.0/0
ports: "53"
protocol: udp
srv_api_uri: https://api.<%= root_domain %>
stacks: null
staging_upload_password: <%= common_password %>
staging_upload_user: <%= common_password %>
system_buildpacks:
- name: java_buildpack
package: buildpack_java
- name: ruby_buildpack
package: buildpack_ruby
- name: nodejs_buildpack
package: buildpack_nodejs
- name: go_buildpack
package: buildpack_go
- name: python_buildpack
package: buildpack_python
- name: php_buildpack
package: buildpack_php
user_buildpacks: []
ccdb:
address: 0.postgres-z1.cf1.<%= deployment_name %>.microbosh
databases:
- name: ccdb
tag: cc
db_scheme: postgres
port: 5524
roles:
- name: ccadmin
password: <%= common_password %>
tag: admin
collector: null
databases:
address: 0.postgres-z1.cf1.<%= deployment_name %>.microbosh
databases:
- citext: true
name: ccdb
tag: cc
- citext: true
name: uaadb
tag: uaa
db_scheme: postgres
port: 5524
roles:
- name: ccadmin
password: <%= common_password %>
tag: admin
- name: uaaadmin
password: <%= common_password %>
tag: admin
dea_next:
allow_networks: null
deny_networks: null
directory_server_protocol: https
disk_mb: 10000
disk_overcommit_factor: 2
evacuation_bail_out_time_in_seconds: 600
instance_disk_inode_limit: 200000
kernel_network_tuning_enabled: true
logging_level: debug
memory_mb: 1024
memory_overcommit_factor: 3
staging_disk_inode_limit: 200000
staging_disk_limit_mb: 4096
staging_memory_limit_mb: 1024
description: Cloud Foundry sponsored by Pivotal
disk_quota_enabled: true
domain: <%= root_domain %>
dropsonde:
enabled: true
etcd:
machines:
- 0.etcd-z1.cf1.<%= deployment_name %>.microbosh
etcd_metrics_server:
nats:
machines:
- 0.nats-z1.cf1.<%= deployment_name %>.microbosh
password: nats
username: nats
logger_endpoint:
port: 4443
loggregator:
blacklisted_syslog_ranges: []
debug: false
maxRetainedLogMessages: 100
loggregator_endpoint:
shared_secret: <%= common_password %>
host: 0.trafficcontroller-z1.cf1.<%= deployment_name %>.microbosh
login:
analytics:
code: null
domain: null
asset_base_url: null
brand: oss
catalina_opts: -Xmx768m -XX:MaxPermSize=256m
links:
home: https://console.<%= root_domain %>
network: null
passwd: https://console.<%= root_domain %>/password_resets/new
signup: https://console.<%= root_domain %>/register
signup-network: null
protocol: http
saml:
metadataTrustCheck: null
signups_enabled: null
smtp:
host: null
password: null
port: null
user: null
tiles: null
uaa_base: null
uaa_certificate: null
url: null
metron_endpoint:
shared_secret: <%= common_password %>
nats:
address: 0.nats-z1.cf1.<%= deployment_name %>.microbosh
debug: false
machines:
- 0.nats-z1.cf1.<%= deployment_name %>.microbosh
monitor_port: 0
password: nats
port: 4222
prof_port: 0
trace: false
user: nats
nfs_server:
address: 0.nfs-z1.cf1.<%= deployment_name %>.microbosh
allow_from_entries:
- 10.0.1.0/24
share: null
request_timeout_in_seconds: 300
router:
status:
password: <%= common_password %>
user: router
smoke_tests: null
ssl:
skip_cert_verify: true
support_address: http://support.cloudfoundry.com
syslog_aggregator: null
system_domain: <%= root_domain %>
system_domain_organization: null
uaa:
admin:
client_secret: <%= common_password %>
authentication:
policy:
countFailuresWithinSeconds: null
lockoutAfterFailures: null
lockoutPeriodSeconds: null
batch:
password: <%= common_password %>
username: batch
catalina_opts: -Xmx768m -XX:MaxPermSize=256m
cc:
client_secret: <%= common_password %>
clients:
app-direct:
access-token-validity: 1209600
authorities: app_direct_invoice.write
authorized-grant-types: authorization_code,client_credentials,password,refresh_token,implicit
override: true
redirect-uri: https://console.<%= root_domain %>
refresh-token-validity: 1209600
secret: <%= common_password %>
developer_console:
access-token-validity: 1209600
authorities: scim.write,scim.read,cloud_controller.read,cloud_controller.write,password.write,uaa.admin,uaa.resource,cloud_controller.admin,billing.admin
authorized-grant-types: authorization_code,client_credentials
override: true
redirect-uri: https://console.<%= root_domain %>/oauth/callback
refresh-token-validity: 1209600
scope: openid,cloud_controller.read,cloud_controller.write,password.write,console.admin,console.support
secret: <%= common_password %>
login:
authorities: oauth.login
authorized-grant-types: authorization_code,client_credentials,refresh_token
override: true
redirect-uri: https://login.<%= root_domain %>
scope: openid,oauth.approvals
secret: <%= common_password %>
notifications:
authorities: cloud_controller.admin,scim.read
authorized-grant-types: client_credentials
secret: <%= common_password %>
servicesmgmt:
authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
authorized-grant-types: authorization_code,client_credentials,password,implicit
autoapprove: true
override: true
redirect-uri: http://servicesmgmt.<%= root_domain %>/auth/cloudfoundry/callback
scope: openid,cloud_controller.read,cloud_controller.write
secret: <%= common_password %>
space-mail:
access-token-validity: 1209600
authorities: scim.read,scim.write,cloud_controller.admin
authorized-grant-types: client_credentials
override: true
refresh-token-validity: 1209600
secret: <%= common_password %>
support-services:
access-token-validity: 1209600
authorities: portal.users.read
authorized-grant-types: authorization_code,client_credentials
redirect-uri: http://support-signon.<%= root_domain %>
refresh-token-validity: 1209600
scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
secret: <%= common_password %>
jwt:
signing_key: '
-----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1
JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6
0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB
AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA
Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0
KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J
duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE
xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8
+5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek
lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h
jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh
HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+
4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=
-----END RSA PRIVATE KEY-----'
verification_key: '
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
spULZVNRxq7veq/fzwIDAQAB
-----END PUBLIC KEY-----'
ldap: null
login:
client_secret: null
no_ssl: false
scim:
external_groups: null
userids_enabled: false
users:
- admin|admin|scim.write,scim.read,openid,cloud_controller.admin,uaa.admin,password.write
- services|password|scim.write,scim.read,openid,cloud_controller.admin
spring_profiles: null
url: https://uaa.<%= root_domain %>
uaadb:
address: 0.postgres-z1.cf1.<%= deployment_name %>.microbosh
databases:
- name: uaadb
tag: uaa
db_scheme: postgresql
port: 5524
roles:
- name: uaaadmin
password: <%= common_password %>
tag: admin
releases:
- name: cf
version: <%= cf_release %>
resource_pools:
- cloud_properties:
instance_type: m1.small
name: small_z1
network: cf1
size: 3
stemcell:
name: <%= stemcell_name %>
version: latest
- cloud_properties:
instance_type: m1.medium
name: medium_z1
network: cf1
size: 10
stemcell:
name: <%= stemcell_name %>
version: latest
- cloud_properties:
instance_type: m1.medium
name: large_z1
network: cf1
size: 1
stemcell:
name: <%= stemcell_name %>
version: latest
- cloud_properties:
instance_type: m1.medium
name: runner_z1
network: cf1
size: 1
stemcell:
name: <%= stemcell_name %>
version: latest
- cloud_properties:
instance_type: m1.medium
name: router_z1
network: cf1
size: 2
stemcell:
name: <%= stemcell_name %>
version: latest
- cloud_properties:
instance_type: m1.small
name: small_errand
network: cf1
size: 0
stemcell:
name: <%= stemcell_name %>
version: latest
update:
canaries: 1
canary_watch_time: 30000-600000
max_in_flight: 1
serial: true
update_watch_time: 5000-600000
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment