manifest_new

---
<%
director_uuid = "YOUR BOSH DIRECTORY ID"
protocol = "http"
cf_release = "155"
cf_services_release = "0.3-dev"
ip_address = "172.21.42.135"
cc_api_url = "http://api.YOURDOMAIN.com"
common_password = "c1oudc0w"
root_domain = "YOURDOMAIN.com"
deployment_name = "cloudfoundry"
ip_mysql_node = "172.21.42.137"
%>
name: <%= deployment_name %>
director_uuid: <%= director_uuid %>

releases:
 - name: cf
   version: <%= cf_release %>
 - name: cf-services
   version: <%= cf_services_release %>
 - name: cf-services-contrib
   version: 3
 - name: cf-mysql
   version: 6

compilation:
  workers: 4
  network: default
  reuse_compilation_vms: true
  cloud_properties:
    instance_type: m1.small

update:
  canaries: 1
  canary_watch_time: 30000-300000
  update_watch_time: 30000-300000
  max_in_flight: 4

networks:
  - name: floating
    type: vip
    cloud_properties:
      security_groups:
      - open
  - name: default
    type: dynamic
    cloud_properties:
      security_groups:
      - open

resource_pools:
  - name: small
    network: default
    size: 10
    stemcell:
      name: bosh-openstack-kvm-ubuntu
      version: 1868
    cloud_properties:
      instance_type: m1.small

  - name: medium
    network: default
    size: 3
    stemcell:
      name: bosh-openstack-kvm-ubuntu
      version: 1868
    cloud_properties:
      instance_type: m1.medium

  - name: dea
    network: default
    size: 8
    stemcell:
      name: bosh-openstack-kvm-ubuntu
      version: 1868
    cloud_properties:
      instance_type: dea

jobs:
  - name: database
    template:
       - postgres
    release: cf
    instances: 1
    resource_pool: small
    persistent_disk: 32786
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - 172.21.42.138
    properties:
      db: databases

  - name: common2
    template:
      - syslog_aggregator
      - nats
      - uaa
    release: cf
    instances: 1
    resource_pool: medium
    persistent_disk: 16384
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - 172.21.42.136

  - name: dea
    template:
      - dea_next
      - dea_logging_agent
    release: cf
    instances: 8
    resource_pool: dea
    networks:
      - name: default
        default: [dns, gateway]

  - name: health
    template:
      - login
      - health_manager_next
      - collector
    release: cf
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - 172.21.42.134

  - name: controller
    template:
      - cloud_controller_ng
      - gorouter
    release: cf
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - <%= ip_address %>
    properties:
      ccdb: ccdb

  - name: controller_worker
    template:
      - cloud_controller_ng
    release: cf
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
    properties:
      ccdb: ccdb
      ccng:
         process_group: worker

  - name: controller_clock
    template:
      - cloud_controller_ng
    release: cf
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
    properties:
      ccdb: ccdb
      ccng:
         process_group: clock

  - name: loggregator
    template:
      - loggregator
    release: cf
    instances: 1  # Scale out as necessary
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - 172.21.42.160

  - name: loggregator-trafficecontroller
    template:
      - loggregator_trafficcontroller
    release: cf
    instances: 1  # Scale out as necessary
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - 172.21.42.154
    properties:
      traffic_controller:
         zone: z1

  - name: mysql
    release: cf-mysql
    template:
    - mysql
    instances: 1
    resource_pool: medium
    persistent_disk: 16384
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - <%= ip_mysql_node %>
    properties:
      admin_password: <%= common_password %>
      max_connections: 1500
      max_user_connections: 40

  - name: cf-mysql-broker
    release: cf-mysql
    template:
      - cf-mysql-broker
    instances: 1
    resource_pool: medium
    persistent_disk: 16384
    networks:
      - name: default
        default: [dns, gateway]
    properties:
      auth_username: services
      auth_password: <%= common_password %>
      cc_api_url: <%= cc_api_url %>
      mysql_node:
        host: <%= ip_mysql_node %>
        admin_password: <%= common_password %>
      services:
      - name: p-mysql
        id: 44b26033-1f54-4087-b7bc-da9652c2a539
        description: MySQL service for application development and testing
        tags:
          - mysql
          - relational
        max_db_per_node: 250
        metadata:
          displayName: "Pivotal MySQL Dev"
          imageUrl: "data:image/png;base64,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"
          longDescription: "A MySQL relational database service for development and testing. The MySQL server is multi-tenant and is not replicated."
          providerDisplayName: "Pivotal Software"
          documentationUrl:
          supportUrl: "http://support.cloudfoundry.com/"
        plans:
        - name: default
          id: ab08f1bc-e6fc-4b56-a767-ee0fea6e3f20
          description: Shared MySQL Server, 50MB persistent disk, 40 max concurrent connections
          max_storage_mb: 50
          metadata:
            costs:
            - amount:
                usd: 0.0
              unit: MONTHLY

            bullets:
              - Shared MySQL server
              - 50 MB storage
              - 40 concurrent connections

  - name: service_gateways
    release: cf-services-contrib
    template:
      - postgresql_gateway_ng
      - mongodb_gateway
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
    properties:
      uaa_client_id: cf
      uaa_endpoint: http://uaa.<%= root_domain %>
      uaa_client_auth_credentials:
        username: services
        password: <%= common_password %>

  - name: postgresql_service_node
    release: cf-services-contrib
    template: postgresql_node_ng
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
    persistent_disk: 10000
    properties:
      postgresql_node:
        plan: default

  - name: mongodb_node
    template:
      - mongodb_node_ng
    release: cf-services-contrib
    instances: 1
    resource_pool: small
    persistent_disk: 16384
    networks:
      - name: default
        default: [dns, gateway]
    properties:
      plan: default
      uaa_client_id: cf
      uaa_endpoint: http://uaa.<%= root_domain %>
      uaa_client_auth_credentials:
        username: services
        password: <%= common_password %>
      service_auth_tokens:
        mongodb_core: c1oudc0wc1oudc0w

properties:
  domain: <%= root_domain %>
  system_domain: <%= root_domain %>
  system_domain_organization: "YOURDOMAIN.com"
  app_domains:
    - <%= root_domain %>
  support_address: ''

  networks:
    apps: default
    management: default

  loggregator:
    servers:
      z1:
      - 172.21.42.160
    incoming_port: 3456
    outgoing_port: 8080

  loggregator_endpoint:
    host: 172.21.42.154
    port: 3456
    shared_secret: wedolovesecrets

  logger_endpoint:
    use_ssl: false
    port: 80

  nats:
    machines:
    - 172.21.42.136
    address: 172.21.42.136
    port: 4222
    user: nats
    password: <%= common_password %>
    authorization_timeout: 10
    use_gnatsd: false

  router:
    status:
      port: 8080
      user: gorouter
      password: <%= common_password %>

  dea: &dea
    memory_mb: 6144
    disk_mb: 16384
    directory_server_protocol: <%= protocol %>
    memory_overcommit_factor: 4
    disk_overcommit_factor: 4

  dea_next: *dea

  syslog_aggregator:
    address: 172.21.42.136
    port: 54321
    relay_host: YOURDOMAIN.com
    relay_host_port: 10514

  databases: &databases
    db_scheme: postgres
    address: 172.21.42.138
    port: 5524
    roles:
      - tag: admin
        name: ccadmin
        password: <%= common_password %>
      - tag: admin
        name: uaaadmin
        password: <%= common_password %>
    databases:
      - tag: cc
        name: ccdb
        citext: true
      - tag: uaa
        name: uaadb
        citext: true

  ccdb: &ccdb
    db_scheme: postgres
    address: 172.21.42.138
    port: 5524
    roles:
      - tag: admin
        name: ccadmin
        password: <%= common_password %>
    databases:
      - tag: cc
        name: ccdb
        citext: true

  ccdb_ng: *ccdb

  uaadb:
    db_scheme: postgresql
    address: FLOATINGIP
    port: 5524
    roles:
      - tag: admin
        name: uaaadmin
        password: <%= common_password %>
    databases:
      - tag: uaa
        name: uaadb
        citext: true

  serialization_data_server:
    port: 8080
    logging_level: debug
    upload_token: 8f7COGvThwlmulIzAgOHxMXurBrG364k
    upload_timeout: 10

  collector:
    deployment_name: cloudfoundry
    use_tsdb: false
    use_aws_cloudwatch: false
    use_datadog: true
    datadog_api_key: DATADOGKEY
    datadog_application_key: cloudfoundry

  service_lifecycle:
    serialization_data_server:
    - 172.21.42.136

  service_plans:
    postgresql:
      default:
        unique_id: 'ef3d543c-0a1f-4db4-ad80-cc2a2f144e17'
        description: "Shared server, shared VM, 1MB memory, 10MB storage, 10 connections"
        free: true
        job_management:
          high_water: 1400
          low_water: 100
        configuration:
          lifecycle:
            enable: false
          warden:
            enable: false
    mongodb:
      default:
        unique_id: "2a42b2de-507a-4775-a23f-dd5303ed5903"
        description: "Developer, shared VM, 250MB storage, 10 connections"
        free: true
        job_management:
          high_water: 230
          low_water: 20
        configuration:
          capacity: 125
          max_clients: 10
          quota_files: 4
          quota_data_size: 240
          enable_journaling: true
          backup:
            enable: false
          lifecycle:
            enable: false
            serialization: enable
            snapshot:
              quota: 1

  postgresql_gateway:
    token: c1oudc0wc1oudc0w
    default_plan: default
    supported_versions: ["9.3"]
    version_aliases:
      current: "9.3"
    cc_api_version: v2
  postgresql_node:
    supported_versions: ["9.3"]
    default_version: "9.3"
    max_tmp: 900
    password: c1oudc0wc1oudc0w

  mongodb_gateway:
    token: c1oudc0wc1oudc0w
    default_plan: default
    supported_versions: ["2.2"]
    version_aliases:
      current: "2.2"
    cc_api_version: v2
  mongodb_node:
    supported_versions: ["2.2"]
    default_version: "2.2"
    max_tmp: 900

  cc_api_version: v2

  cc: &cc
    logging_level: debug
    srv_api_uri: <%= protocol %>://api.<%= root_domain %>
    cc_partition: default
    db_encryption_key: "b963127302433579"
    bootstrap_admin_email: "EMAIL@ADDRESS.com"
    bulk_api_password: <%= common_password %>
    uaa_resource_id: cloud_controller
    staging_upload_user: uploaduser
    staging_upload_password: <%= common_password %>
    resource_pool:
      resource_directory_key: <%= root_domain %>-cc-resources
      fog_connection:
        provider: "AWS"
        host: "s3.YOURDOMAIN.com"
        scheme: "http"
        port: 80
        aws_access_key_id: "ACCESKEY"
        aws_secret_access_key: "SECRETKEY"
    packages:
      app_package_directory_key: <%= root_domain %>-cc-packages
      fog_connection:
        provider: "AWS"
        host: "s3.YOURDOMAIN.com"
        scheme: "http"
        port: 80
        aws_access_key_id: "ACCESKEY"
        aws_secret_access_key: "SECRETKEY"
    droplets:
      droplet_directory_key: <%= root_domain %>-cc-droplets
      fog_connection:
        provider: "AWS"
        host: "s3.YOURDOMAIN.com"
        scheme: "http"
        port: 80
        aws_access_key_id: "ACCESKEY"
        aws_secret_access_key: "SECRETKEY"
    buildpacks:
      buildpack_directory_key: <%= root_domain %>-cc-buildpacks
      fog_connection:
        provider: "AWS"
        host: "s3.YOURDOMAIN.com"
        scheme: "http"
        port: 80
        aws_access_key_id: "ACCESKEY"
        aws_secret_access_key: "SECRETKEY"
    quota_definitions:
      free:
        non_basic_services_allowed: true
        total_services: 4
        memory_limit: 8192
    default_quota_definition: free
    newrelic:
       license_key: ''

  ccng: *cc

  login:
    protocol: http
    links:
      home: http://console.<%= root_domain %>
      passwd: http://console.<%= root_domain %>/password_resets/new
      signup: http://console.<%= root_domain %>/register

  uaa:
    url: <%= protocol %>://uaa.<%= root_domain %>
    spring_profiles: postgresql
    no_ssl: <%= protocol == "http" %>
    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
    resource_id: account_manager
    jwt:
      signing_key: |
        -----BEGIN RSA PRIVATE KEY-----
        MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1
        JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6
        0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB
        AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA
        Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0
        KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J
        duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE
        xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8
        +5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek
        lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h
        jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh
        HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+
        4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=
        -----END RSA PRIVATE KEY-----
      verification_key: |
        -----BEGIN PUBLIC KEY-----
        MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
        KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
        qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
        spULZVNRxq7veq/fzwIDAQAB
        -----END PUBLIC KEY-----
    cc:
      client_secret: <%= common_password %>
    admin:
      client_secret: <%= common_password %>
    batch:
      username: batchuser
      password: <%= common_password %>
    client:
      autoapprove:
        - cf
        - vmc
        - my
        - micro
        - support-signon
        - login
        - styx
    clients:
      login:
        override: true
        scope: openid
        authorities: oauth.login
        secret: c1oudc0w
        authorized-grant-types: authorization_code,client_credentials,refresh_token
        redirect-uri: http://login.<%= root_domain %>
      support-services:
        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
        secret: ssosecretsso
        authorized-grant-types: authorization_code,client_credentials
        redirect-uri: http://support-signon.<%= root_domain %>
        authorities: portal.users.read
        access-token-validity: 1209600
        refresh-token-validity: 1209600
      vmc:
        override: true
        authorized-grant-types: password,implicit
        authorities: uaa.none
        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
      cf:
        override: true
        authorized-grant-types: password,implicit,refresh_token
        authorities: uaa.none
        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
        access-token-validity: 7200
        refresh-token-validity: 1209600
      servicesmgmt:
        override: true
        secret: serivcesmgmtsecret
        scope: openid,cloud_controller.read,cloud_controller.write
        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
        authorized-grant-types: authorization_code,client_credentials,password,implicit
        redirect-uri: http://servicesmgmt.<%= root_domain %>/auth/cloudfoundry/callback
        autoapprove: true
      styx:
        override: true
        id: styx
        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write,password.write,cloud_controller.admin
        secret: styxsecret
        authorities: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write,password.write,uaa.admin,uaa.none,cloud_controller.admin
        authorized-grant-types: authorization_code,client_credentials,password,implicit
        access-token-validity: 1209600
        refresh-token-validity: 1209600
      admin:
        secret: <%= common_password %>
        authorized-grant-types: client_credentials
        authorities: clients.read,clients.write,clients.secret,password.write,scim.read,uaa.admin
    scim:
      userids_enabled: true
      users:
      - admin|<%= common_password %>|scim.write,scim.read,openid,cloud_controller.admin,uaa.admin,password.write
      - services|<%= common_password %>|scim.write,scim.read,openid,cloud_controller.admin
      - cloudfoundry|PASSWORD|scim.write,scim.read,openid,cloud_controller.admin