Skip to content

Instantly share code, notes, and snippets.

@grenzr
Created June 10, 2013 12:50
Show Gist options
  • Save grenzr/5748468 to your computer and use it in GitHub Desktop.
Save grenzr/5748468 to your computer and use it in GitHub Desktop.
---
name: cf-openstack
director_uuid: a1ac183d-df5c-485b-ba3a-f4167c064fd4
releases:
- name: cf-release
version: latest
compilation:
workers: 6
network: default
reuse_compilation_vms: true
cloud_properties:
instance_type: m1.microbosh
update:
canaries: 1
canary_watch_time: 30000-600000
update_watch_time: 30000-600000
max_in_flight: 4
max_errors: 1
networks:
- name: floating
type: vip
cloud_properties: {}
type: manual
subnets:
- name: default
range: 10.0.1.0/24
gateway: 10.0.1.1
reserved:
- 10.0.1.2 - 10.0.1.9
static:
- 10.0.1.10 - 10.0.1.20
cloud_properties:
security_groups:
- default
# - cf
net_id: 3ad801fb-49a1-42ab-90c5-5070ca0ed97b
resource_pools:
- name: small
network: default
size: 2
stemcell:
name: bosh-stemcell
version: latest
cloud_properties:
instance_type: m1.small
- name: medium
network: default
size: 1
stemcell:
name: bosh-stemcell
version: latest
cloud_properties:
instance_type: m1.medium
jobs:
- name: common1
template:
- syslog_aggregator
- nats
- postgres
- dea_next
- uaa
instances: 1
resource_pool: medium
persistent_disk: 16384
networks:
- name: default
default: [dns, gateway]
static_ips:
- 10.0.1.10
properties:
db: databases
- name: common2
template:
- login
- health_manager_next
- collector
instances: 1
resource_pool: small
networks:
- name: default
default: [dns, gateway]
static_ips:
- 10.0.1.12
- name: common3
template:
- cloud_controller_ng
- gorouter
instances: 1
resource_pool: small
networks:
- name: default
default: [dns, gateway]
static_ips:
- 10.0.1.11
- name: floating
static_ips:
- 172.20.217.140
properties:
ccdb: ccdb
properties:
domain: yourdomain.com
system_domain: yourdomain.com
system_domain_organization: "yourdomain"
app_domains:
- yourdomain.com
networks:
apps: default
management: default
nats:
address: 10.0.1.10
port: 4222
user: nats
password: "c1oudc0w"
authorization_timeout: 5
router:
port: 8081
status:
port: 8080
user: gorouter
password: "c1oudc0w"
dea: &dea
max_memory: 4096
memory_mb: 4084
memory_overcommit_factor: 4
disk_mb: 16384
disk_overcommit_factor: 4
dea_next: *dea
service_lifecycle:
serialization_data_server:
- 169.254.1.1
syslog_aggregator:
address: 10.0.1.10
port: 54321
serialization_data_server:
port: 8080
logging_level: debug
upload_token: 8f7COGvThwlmulIzAgOHxMXurBrG364k
upload_timeout: 10
collector:
deployment_name: cf-openstack
use_tsdb: false
use_aws_cloudwatch: false
use_datadog: false
databases: &databases
db_scheme: postgres
address: 10.0.1.10
port: 5524
roles:
- tag: admin
name: ccadmin
password: "c1oudc0w"
- tag: admin
name: uaaadmin
password: "c1oudc0w"
databases:
- tag: cc
name: ccdb
citext: true
- tag: uaa
name: uaadb
citext: true
ccdb: &ccdb
db_scheme: postgres
address: 10.0.1.10
port: 5524
roles:
- tag: admin
name: ccadmin
password: "c1oudc0w"
databases:
- tag: cc
name: ccdb
citext: true
ccdb_ng: *ccdb
uaadb:
db_scheme: postgresql
address: 10.0.1.10
port: 5524
roles:
- tag: admin
name: uaaadmin
password: "c1oudc0w"
databases:
- tag: uaa
name: uaadb
citext: true
cc_api_version: v2
cc: &cc
logging_level: debug
external_host: ccng
srv_api_uri: http://ccng.yourdomain.com
cc_partition: default
db_encryption_key: "b963127302433579"
bootstrap_admin_email: "[email protected]"
bulk_api_password: "c1oudc0w"
uaa_resource_id: cloud_controller
staging_upload_user: uploaduser
staging_upload_password: c1oudc0w
resource_pool:
resource_directory_key: yourdomain-com-cc-resources
packages:
app_package_directory_key: yourdomain-com-cc-packages
droplets:
droplet_directory_key: yourdomain-com-cc-droplets
ccng: *cc
login:
protocol: http
links:
home: http://console.yourdomain.com
passwd: http://console.yourdomain.com/password_resets/new
signup: http://console.yourdomain.com/register
uaa:
url: http://uaa.yourdomain.com
spring_profiles: postgresql
no_ssl: true
catalina_opts: -Xmx768m -XX:MaxPermSize=256m
resource_id: account_manager
jwt:
signing_key: |
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
verification_key: |
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
spULZVNRxq7veq/fzwIDAQAB
-----END PUBLIC KEY-----
cc:
client_secret: "c1oudc0w"
admin:
client_secret: "c1oudc0w"
batch:
username: batchuser
password: c1oudc0w
client:
autoapprove:
- cf
- vmc
- my
- micro
- support-signon
- login
clients:
login:
override: true
scope: openid
authorities: oauth.login
secret: c1oudc0w
authorized-grant-types: authorization_code,client_credentials,refresh_token
redirect-uri: http://login.yourdomain.com
support-services:
scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
secret: ssosecretsso
authorized-grant-types: authorization_code,client_credentials
redirect-uri: http://support-signon.yourdomain.com
authorities: portal.users.read
access-token-validity: 1209600
refresh-token-validity: 1209600
vmc:
override: true
authorized-grant-types: password,implicit
authorities: uaa.none
scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
cf:
override: true
authorized-grant-types: password,implicit,refresh_token
authorities: uaa.none
scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
servicesmgmt:
override: true
secret: serivcesmgmtsecret
scope: openid,cloud_controller.read,cloud_controller.write
authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
authorized-grant-types: authorization_code,client_credentials,password,implicit
redirect-uri: http://servicesmgmt.yourdomain.com/auth/cloudfoundry/callback
autoapprove: true
scim:
users:
- admin|c1oudc0w|scim.write,scim.read,openid,cloud_controller.admin
- services|c1oudc0w|scim.write,scim.read,openid,cloud_controller.admin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment