AppFirst + CF Release 151 on vSphere

gistfile1.txt

---
name: test
director_uuid: 46beb722-f241-4419-a0b5-dcba70805116

releases:
 - name: lite
   version: 151.9-dev

networks:
- name: default
  subnets:
  - range: 10.146.18.0/25
    reserved:
    - 10.146.18.1-10.146.18.12
    - 10.146.18.47-10.146.18.50
    - 10.146.18.53-10.146.18.124
    - 10.146.18.126
    static:
    - 10.146.18.13 - 10.146.18.28
    gateway: 10.146.18.125
    dns:
    - 10.146.18.11
    - 10.146.17.146
    cloud_properties:
      name: MattNetwork

update:
  canaries: 1
  canary_watch_time: 30000-60000
  update_watch_time: 30000-60000
  max_in_flight: 4

compilation:
  workers: 6
  network: default
  reuse_compilation_vms: true
  cloud_properties:
    ram: 1024
    disk: 4096
    cpu: 2

resource_pools:
  - name: small
    network: default
    size: 4
    stemcell:
      name: bosh-vsphere-esxi-ubuntu
      version: latest
    cloud_properties:
      ram: 2048
      disk: 8192
      cpu: 1

  - name: medium
    network: default
    size: 0
    stemcell:
      name: bosh-vsphere-esxi-ubuntu
      version: latest
    cloud_properties:
      ram: 4096
      disk: 16384
      cpu: 2

jobs:
  - name: data
    release: lite
    template:
      - postgres
      - debian_nfs_server
    instances: 1
    resource_pool: small
    persistent_disk: 4096
    networks:
    - name: default
      default:
      - dns
      - gateway
      static_ips:
      - 10.146.18.13
    properties:
      db: databases

  - name: core
    release: lite
    template:
      - appfirst
      - nats
      - health_manager_next
      - uaa
      - syslog_aggregator
      - loggregator
    instances: 1
    resource_pool: small
    networks:
    - name: default
      default:
      - dns
      - gateway
      static_ips:
      - 10.146.18.14
    properties:
      appfirst:
        tenant_id: *****
        tags:
        - owner=mstine
        - job=core

  - name: api
    release: lite
    template:
      - appfirst
      - cloud_controller_ng
      - gorouter
      - loggregator_trafficcontroller
    instances: 1
    resource_pool: small
    networks:
    - name: default
      default:
      - dns
      - gateway
      static_ips:
      - 10.146.18.15
    properties:
      db: databases
      traffic_controller:
        zone: z1
      appfirst:
        tenant_id: *****
        tags:
        - owner=mstine
        - job=api

  - name: dea
    release: lite
    template:
      - appfirst
      - dea_next
      - dea_logging_agent
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
        static_ips:
        - 10.146.18.16
    properties:
      loggregator_endpoint:
        host: 0.api.default.test.microbosh 
      appfirst:
        tenant_id: *****
        tags:
        - owner=mstine
        - job=dea

properties:
  cf:
    name: test
    dns: 10.146.18.15.xip.io
    ip_addresses: ["10.146.18.15"]
    deployment_size: medium
    security_group: default
    persistent_disk: 4096
    common_password: ******
    dea_server_ram: 1500
    dea_container_depot_disk: 10240

  domain: 10.146.18.15.xip.io
  system_domain: 10.146.18.15.xip.io
  system_domain_organization: system_domain
  app_domains:
    - 10.146.18.15.xip.io

  networks:
    apps: default
    management: default

  nats:
    address: 0.core.default.test.microbosh
    machines:
    - 0.core.default.test.microbosh
    port: 4222
    user: nats
    password: ******
    authorization_timeout: 5

  router:
    port: 8081
    status:
      port: 8080
      user: gorouter
      password: ******
 
  loggregator:
    servers:
      z1:
      - 0.core.default.test.microbosh 
    incoming_port: 3456
    outgoing_port: 3457 

  loggregator_endpoint:
    shared_secret: ******
    host: 0.api.default.test.microbosh
    port: 3456

  dea: &dea
    memory_mb: 1500
    disk_mb: 10240
    directory_server_protocol: http

  dea_next: *dea

  syslog_aggregator:
    address: 0.core.default.test.microbosh
    port: 54321

  nfs_server:
    address: 0.data.default.test.microbosh
    network: "*.test.microbosh"
    idmapd_domain: 10.146.18.15.xip.io

  debian_nfs_server:
    no_root_squash: true

  databases: &databases
    db_scheme: postgres
    address: 0.data.default.test.microbosh
    port: 5524
    roles:
      - tag: admin
        name: ccadmin
        password: ******
      - tag: admin
        name: uaaadmin
        password: ******
    databases:
      - tag: cc
        name: ccdb
        citext: true
      - tag: uaa
        name: uaadb
        citext: true

  ccdb: &ccdb
    db_scheme: postgres
    address: 0.data.default.test.microbosh
    port: 5524
    roles:
      - tag: admin
        name: ccadmin
        password: ******
    databases:
      - tag: cc
        name: ccdb
        citext: true

  ccdb_ng: *ccdb

  uaadb: 
    db_scheme: postgresql
    address: 0.data.default.test.microbosh
    port: 5524
    roles:
      - tag: admin
        name: uaaadmin
        password: ******
    databases:
      - tag: uaa
        name: uaadb
        citext: true

  cc_api_version: v2

  cc: &cc
    logging_level: debug
    external_host: api
    srv_api_uri: http://api.10.146.18.15.xip.io
    cc_partition: default
    db_encryption_key: ******
    bootstrap_admin_email: admin@10.146.18.15.xip.io
    bulk_api_password: ******
    uaa_resource_id: cloud_controller
    staging_upload_user: uploaduser
    staging_upload_password: ******
    resource_pool:
      resource_directory_key: cc-resources
      # Local provider when using NFS
      fog_connection:
        provider: Local
    packages:
      app_package_directory_key: cc-packages
    droplets:
      droplet_directory_key: cc-droplets
    default_quota_definition: runaway

  ccng: *cc

  login:
    enabled: false

  uaa:
    url: http://uaa.10.146.18.15.xip.io
    spring_profiles: postgresql
    no_ssl: true
    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
    resource_id: account_manager
    jwt:
      signing_key: |
        -----BEGIN RSA PRIVATE KEY-----
        ******
        -----END RSA PRIVATE KEY-----
      verification_key: |
        -----BEGIN PUBLIC KEY-----
        MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
        KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
        qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
        spULZVNRxq7veq/fzwIDAQAB
        -----END PUBLIC KEY-----
    cc:
      client_secret: ******
    admin:
      client_secret: ******
    batch:
      username: batchuser
      password: ******
    client:
      autoapprove:
        - cf
    clients:
      cf:
        override: true
        authorized-grant-types: password,implicit,refresh_token
        authorities: uaa.none
        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
        access-token-validity: 7200
        refresh-token-validity: 1209600
    scim:
      users:
      - admin|41d718753fef|scim.write,scim.read,openid,cloud_controller.admin
      - services|41d718753fef|scim.write,scim.read,openid,cloud_controller.admin