Created
January 15, 2015 01:46
-
-
Save jpalermo/a25ee74e2faca1e4e299 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
name: cf | |
director_uuid: REPLACE_WITH_DIRECTOR_ID | |
releases: | |
- name: cf | |
version: latest | |
networks: | |
- name: cf_private | |
type: manual | |
subnets: | |
- range: 10.0.16.0/24 | |
gateway: 10.0.16.1 | |
dns: | |
- 10.0.0.2 | |
reserved: | |
- 10.0.16.2 - 10.0.16.3 | |
static: | |
- 10.0.16.100 - 10.0.16.105 | |
cloud_properties: | |
subnet: REPLACE_WITH_PRIVATE_SUBNET_ID | |
- name: cf_public | |
type: manual | |
subnets: | |
- range: 10.0.0.0/24 | |
gateway: 10.0.0.1 | |
dns: | |
- 10.0.0.2 | |
reserved: | |
- 10.0.0.2 - 10.0.0.10 | |
cloud_properties: | |
subnet: REPLACE_WITH_PUBLIC_SUBNET_ID | |
- name: elastic | |
type: vip | |
cloud_properties: {} | |
resource_pools: | |
- name: small_z1 | |
network: cf_private | |
stemcell: | |
name: bosh-aws-xen-ubuntu-trusty-go_agent | |
version: 2811 | |
cloud_properties: | |
availability_zone: REPLACE_WITH_AZ | |
instance_type: m1.small | |
compilation: | |
workers: 6 | |
network: cf_private | |
reuse_compilation_vms: true | |
cloud_properties: | |
availability_zone: REPLACE_WITH_AZ | |
instance_type: c3.large | |
update: | |
canaries: 1 | |
max_in_flight: 1 | |
serial: false | |
canary_watch_time: 30000-600000 | |
update_watch_time: 5000-600000 | |
jobs: | |
- name: nats_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
static_ips: | |
- 10.0.16.103 | |
properties: | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: nats | |
release: cf | |
- name: nats_stream_forwarder | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: etcd_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
static_ips: | |
- 10.0.16.104 | |
properties: | |
etcd_metrics_server: | |
nats: | |
machines: | |
- 10.0.16.103 | |
password: PASSWORD | |
username: nats | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: etcd | |
release: cf | |
- name: etcd_metrics_server | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: nfs_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
static_ips: | |
- 10.0.16.105 | |
persistent_disk: 102400 | |
resource_pool: small_z1 | |
templates: | |
- name: debian_nfs_server | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: postgres_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
static_ips: | |
- 10.0.16.101 | |
persistent_disk: 1024 | |
resource_pool: small_z1 | |
templates: | |
- name: postgres | |
release: cf | |
- name: metron_agent | |
release: cf | |
update: | |
serial: true | |
- name: api_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
networks: | |
apps: cf_private | |
nfs_server: | |
address: 10.0.16.105 | |
allow_from_entries: | |
- 10.0.16.0/24 | |
share: | |
resource_pool: small_z1 | |
templates: | |
- name: cloud_controller_ng | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: nfs_mounter | |
release: cf | |
- name: api_worker_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
networks: | |
apps: cf_private | |
nfs_server: | |
address: 10.0.16.105 | |
allow_from_entries: | |
- 10.0.16.0/24 | |
share: | |
resource_pool: small_z1 | |
templates: | |
- name: cloud_controller_worker | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: nfs_mounter | |
release: cf | |
- name: clock_global | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: cloud_controller_clock | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: ha_proxy_z1 | |
instances: 1 | |
networks: | |
- name: elastic | |
static_ips: | |
- REPLACE_WITH_ELASTIC_IP | |
- name: cf_public | |
default: [gateway, dns] | |
properties: | |
ha_proxy: | |
ssl_pem: | | |
REPLACE_WITH_SSL_CERT_AND_KEY | |
networks: | |
apps: cf_private | |
router: | |
servers: | |
z1: | |
- 10.0.16.102 | |
resource_pool: small_z1 | |
templates: | |
- name: haproxy | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: hm9000_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: hm9000 | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: loggregator_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
doppler: | |
zone: z1 | |
doppler_endpoint: | |
shared_secret: PASSWORD | |
resource_pool: small_z1 | |
templates: | |
- name: doppler | |
release: cf | |
- name: loggregator_trafficcontroller_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
traffic_controller: | |
zone: z1 | |
resource_pool: small_z1 | |
templates: | |
- name: loggregator_trafficcontroller | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: login_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
login: | |
catalina_opts: -Xmx768m -XX:MaxPermSize=256m | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: login | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: router_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
static_ips: | |
- 10.0.16.102 | |
properties: | |
dropsonde: | |
enabled: true | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: gorouter | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: runner_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
dea_next: | |
zone: z1 | |
networks: | |
apps: cf_private | |
resource_pool: small_z1 | |
templates: | |
- name: dea_next | |
release: cf | |
- name: dea_logging_agent | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: stats_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
networks: | |
apps: cf_private | |
collector: | |
deployment_name: CF | |
resource_pool: small_z1 | |
templates: | |
- name: collector | |
release: cf | |
- name: metron_agent | |
release: cf | |
- name: uaa_z1 | |
instances: 1 | |
networks: | |
- name: cf_private | |
properties: | |
networks: | |
apps: cf_private | |
uaa: | |
admin: | |
client_secret: PASSWORD | |
batch: | |
password: PASSWORD | |
username: batch_user | |
cc: | |
client_secret: PASSWORD | |
scim: | |
userids_enabled: true | |
users: | |
- admin|PASSWORD|scim.write,scim.read,openid,cloud_controller.admin,doppler.firehose | |
uaadb: | |
address: 10.0.16.101 | |
databases: | |
- name: uaadb | |
tag: uaa | |
db_scheme: postgresql | |
port: 5524 | |
roles: | |
- name: uaaadmin | |
password: PASSWORD | |
tag: admin | |
resource_pool: small_z1 | |
templates: | |
- name: uaa | |
release: cf | |
- name: metron_agent | |
release: cf | |
properties: | |
app_domains: | |
- REPLACE_WITH_SYSTEM_DOMAIN | |
cc: | |
billing_event_writing_enabled: false | |
bulk_api_password: PASSWORD | |
db_encryption_key: PASSWORD | |
default_running_security_groups: | |
- public_networks | |
- dns | |
default_staging_security_groups: | |
- public_networks | |
- dns | |
install_buildpacks: | |
- name: java_buildpack | |
package: buildpack_java | |
- name: ruby_buildpack | |
package: buildpack_ruby | |
- name: nodejs_buildpack | |
package: buildpack_nodejs | |
- name: go_buildpack | |
package: buildpack_go | |
- name: python_buildpack | |
package: buildpack_python | |
- name: php_buildpack | |
package: buildpack_php | |
internal_api_password: PASSWORD | |
quota_definitions: | |
default: | |
memory_limit: 102400 | |
non_basic_services_allowed: true | |
total_routes: 1000 | |
total_services: -1 | |
security_group_definitions: | |
- name: public_networks | |
rules: | |
- destination: 0.0.0.0-9.255.255.255 | |
protocol: all | |
- destination: 11.0.0.0-169.253.255.255 | |
protocol: all | |
- destination: 169.255.0.0-172.15.255.255 | |
protocol: all | |
- destination: 172.32.0.0-192.167.255.255 | |
protocol: all | |
- destination: 192.169.0.0-255.255.255.255 | |
protocol: all | |
- name: dns | |
rules: | |
- destination: 0.0.0.0/0 | |
ports: '53' | |
protocol: tcp | |
- destination: 0.0.0.0/0 | |
ports: '53' | |
protocol: udp | |
srv_api_uri: http://api.REPLACE_WITH_SYSTEM_DOMAIN | |
staging_upload_password: PASSWORD | |
staging_upload_user: staging_upload_user | |
ccdb: | |
address: 10.0.16.101 | |
databases: | |
- name: ccdb | |
tag: cc | |
db_scheme: postgres | |
port: 5524 | |
roles: | |
- name: ccadmin | |
password: PASSWORD | |
tag: admin | |
databases: | |
databases: | |
- citext: true | |
name: ccdb | |
tag: cc | |
- citext: true | |
name: uaadb | |
tag: uaa | |
port: 5524 | |
roles: | |
- name: ccadmin | |
password: PASSWORD | |
tag: admin | |
- name: uaaadmin | |
password: PASSWORD | |
tag: admin | |
dea_next: | |
advertise_interval_in_seconds: 5 | |
heartbeat_interval_in_seconds: 10 | |
memory_mb: 33996 | |
description: Cloud Foundry sponsored by Pivotal | |
domain: REPLACE_WITH_SYSTEM_DOMAIN | |
etcd: | |
machines: | |
- 10.0.16.104 | |
hm9000: | |
url: http://hm9000.REPLACE_WITH_SYSTEM_DOMAIN | |
logger_endpoint: | |
port: 4443 | |
loggregator_endpoint: | |
shared_secret: PASSWORD | |
login: | |
protocol: http | |
metron_agent: | |
zone: z1 | |
metron_endpoint: | |
shared_secret: PASSWORD | |
nats: | |
machines: | |
- 10.0.16.103 | |
password: PASSWORD | |
port: 4222 | |
user: nats | |
nfs_server: | |
address: 10.0.16.105 | |
allow_from_entries: | |
- 10.0.16.0/24 | |
ssl: | |
skip_cert_verify: true | |
system_domain: REPLACE_WITH_SYSTEM_DOMAIN | |
system_domain_organization: default_organization | |
uaa: | |
clients: | |
cc-service-dashboards: | |
authorities: clients.read,clients.write,clients.admin | |
authorized-grant-types: client_credentials | |
scope: openid,cloud_controller_service_permissions.read | |
secret: PASSWORD | |
cloud_controller_username_lookup: | |
secret: PASSWORD | |
doppler: | |
authorities: uaa.resource | |
secret: PASSWORD | |
login: | |
authorities: oauth.login,scim.write,clients.read,notifications.write,critical_notifications.write,emails.write,scim.userids,password.write | |
authorized-grant-types: authorization_code,client_credentials,refresh_token | |
redirect-uri: http://login.REPLACE_WITH_SYSTEM_DOMAIN | |
scope: openid,oauth.approvals | |
secret: PASSWORD | |
servicesmgmt: | |
authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret | |
authorized-grant-types: authorization_code,client_credentials,password,implicit | |
autoapprove: true | |
redirect-uri: http://servicesmgmt.REPLACE_WITH_SYSTEM_DOMAIN/auth/cloudfoundry/callback | |
scope: openid,cloud_controller.read,cloud_controller.write | |
secret: PASSWORD | |
jwt: | |
signing_key: | | |
-----BEGIN RSA PRIVATE KEY----- | |
MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1 | |
JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6 | |
0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB | |
AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA | |
Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0 | |
KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J | |
duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE | |
xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8 | |
+5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek | |
lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h | |
jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh | |
HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+ | |
4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY= | |
-----END RSA PRIVATE KEY----- | |
verification_key: | | |
-----BEGIN PUBLIC KEY----- | |
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d | |
KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX | |
qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug | |
spULZVNRxq7veq/fzwIDAQAB | |
-----END PUBLIC KEY----- | |
no_ssl: true | |
url: http://uaa.REPLACE_WITH_SYSTEM_DOMAIN |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment