Skip to content

Instantly share code, notes, and snippets.

@ngtuna
Last active August 29, 2015 14:04
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ngtuna/8bdb4ed0eedd180ae23d to your computer and use it in GitHub Desktop.
Save ngtuna/8bdb4ed0eedd180ae23d to your computer and use it in GitHub Desktop.
cf-aws.yml [success with CF-175]
---
name: cf-aws
director_uuid: 5b935d4f-b286-4dab-a92d-35217df6daa2
releases:
- name: cf
version: 175+dev.1
compilation:
workers: 6
network: default
reuse_compilation_vms: true
cloud_properties:
instance_type: m1.medium
update:
canaries: 1
canary_watch_time: 30000-600000
update_watch_time: 30000-600000
max_in_flight: 4
max_errors: 1
networks:
- name: floating
type: vip
cloud_properties: {}
- name: default
type: dynamic
cloud_properties:
security_groups:
- bosh
resource_pools:
- name: small
network: default
size: 2
stemcell:
name: bosh-aws-xen-ubuntu-lucid
version: 2579
cloud_properties:
instance_type: m1.small
- name: medium
network: default
size: 1
stemcell:
name: bosh-aws-xen-ubuntu-lucid
version: 2579
cloud_properties:
instance_type: m1.medium
jobs:
- name: common1
template:
- syslog_aggregator
- nats
- postgres
- dea_next
- uaa
instances: 1
resource_pool: medium
persistent_disk: 16384
networks:
- name: default
default: [dns, gateway]
properties:
db: databases
- name: common2
template:
- login
- collector
instances: 1
resource_pool: small
networks:
- name: default
default: [dns, gateway]
- name: common3
template:
- cloud_controller_ng
- gorouter
instances: 1
resource_pool: small
networks:
- name: default
default: [dns, gateway]
- name: floating
static_ips:
- 174.129.39.229
properties:
db: ccdb
properties:
domain: 174.129.39.229.xip.io
system_domain: 174.129.39.229.xip.io.com
system_domain_organization: system_domain
app_domains:
- 174.129.39.229.xip.io
networks:
apps: default
management: default
nats:
address: 0.common1.default.cf-aws.microbosh
port: 4222
user: nats
password: "c1oudc0w"
authorization_timeout: 5
machines:
- 0.common1.default.cf-aws.microbosh
router:
port: 8081
status:
port: 8080
user: gorouter
password: "c1oudc0w"
dea: &dea
max_memory: 4096
memory_mb: 4084
memory_overcommit_factor: 4
disk_mb: 16384
disk_overcommit_factor: 4
dea_next: *dea
service_lifecycle:
serialization_data_server:
- 169.254.1.1
syslog_aggregator:
address: 0.syslog-aggregator.default.cf-aws.microbosh
port: 54321
serialization_data_server:
port: 8080
logging_level: debug
upload_token: 8f7COGvThwlmulIzAgOHxMXurBrG364k
upload_timeout: 10
collector:
deployment_name: cf-aws
use_tsdb: false
use_aws_cloudwatch: false
use_datadog: false
databases: &databases
db_scheme: postgres
address: 0.common1.default.cf-aws.microbosh
port: 5524
roles:
- tag: admin
name: ccadmin
password: "c1oudc0w"
- tag: admin
name: uaaadmin
password: "c1oudc0w"
databases:
- tag: cc
name: ccdb
citext: true
- tag: uaa
name: uaadb
citext: true
ccdb: &ccdb
db_scheme: postgres
address: 0.common1.default.cf-aws.microbosh
port: 5524
roles:
- tag: admin
name: ccadmin
password: "c1oudc0w"
databases:
- tag: cc
name: ccdb
citext: true
ccdb_ng: *ccdb
uaadb:
db_scheme: postgresql
address: 0.common1.default.cf-aws.microbosh
port: 5524
roles:
- tag: admin
name: uaaadmin
password: "c1oudc0w"
databases:
- tag: uaa
name: uaadb
citext: true
cc_api_version: v2
cc: &cc
logging_level: debug
external_host: ccng
srv_api_uri: http://api.174.129.39.229.xip.io
cc_partition: default
db_encryption_key: "b963127302433579"
bootstrap_admin_email: "admin@174.129.39.229.xip.io"
bulk_api_password: "c1oudc0w"
uaa_resource_id: cloud_controller
staging_upload_user: uploaduser
staging_upload_password: c1oudc0w
security_group_definitions:
- name: public_networks
rules:
- protocol: all
destination: 0.0.0.0-9.255.255.255
- protocol: all
destination: 11.0.0.0-169.253.255.255
- protocol: all
destination: 169.255.0.0-172.15.255.255
- protocol: all
destination: 172.32.0.0-192.167.255.255
- protocol: all
destination: 192.169.0.0-255.255.255.255
- name: dns
rules:
- protocol: tcp
destination: 0.0.0.0/0
ports: '53'
- protocol: udp
destination: 0.0.0.0/0
ports: '53'
default_running_security_groups: ["public_networks", "dns"]
default_staging_security_groups: ["public_networks", "dns"]
resource_pool:
resource_directory_key: yourdomain-com-cc-resources
packages:
app_package_directory_key: yourdomain-com-cc-packages
droplets:
droplet_directory_key: yourdomain-com-cc-droplets
quota_definitions:
free:
non_basic_services_allowed: true
total_services: 4
total_routes: 1000
memory_limit: 8192
default_quota_definition: free
ccng: *cc
login:
protocol: http
links:
home: http://console.174.129.39.229.xip.io
passwd: http://console.174.129.39.229.xip.io/password_resets/new
signup: http://console.174.129.39.229.xip.io/register
uaa:
url: http://uaa.174.129.39.229.xip.io
spring_profiles: postgresql
no_ssl: true
catalina_opts: -Xmx768m -XX:MaxPermSize=256m
resource_id: account_manager
jwt:
signing_key: |
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
verification_key: |
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
spULZVNRxq7veq/fzwIDAQAB
-----END PUBLIC KEY-----
cc:
client_secret: "c1oudc0w"
admin:
client_secret: "c1oudc0w"
batch:
username: batchuser
password: c1oudc0w
client:
autoapprove:
- cf
- vmc
- my
- micro
- support-signon
- login
clients:
login:
override: true
scope: openid
authorities: oauth.login
secret: c1oudc0w
authorized-grant-types: authorization_code,client_credentials,refresh_token
redirect-uri: http://login.174.129.39.229.xip.io
support-services:
scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
secret: ssosecretsso
authorized-grant-types: authorization_code,client_credentials
redirect-uri: http://support-signon.174.129.39.229.xip.io
authorities: portal.users.read
access-token-validity: 1209600
refresh-token-validity: 1209600
vmc:
override: true
authorized-grant-types: password,implicit
authorities: uaa.none
scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
cf:
override: true
authorized-grant-types: password,implicit,refresh_token
authorities: uaa.none
scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
servicesmgmt:
override: true
secret: serivcesmgmtsecret
scope: openid,cloud_controller.read,cloud_controller.write
authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
authorized-grant-types: authorization_code,client_credentials,password,implicit
redirect-uri: http://servicesmgmt.174.129.39.229.xip.io/auth/cloudfoundry/callback
autoapprove: true
scim:
users:
- admin|c1oudc0w|scim.write,scim.read,openid,cloud_controller.admin
- services|c1oudc0w|scim.write,scim.read,openid,cloud_controller.admin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment