Skip to content

Instantly share code, notes, and snippets.

@ngtuna

ngtuna/cf-aws.yml

Created December 4, 2014 16:14
Show Gist options
  • Save ngtuna/87846a4494afa1a5399b to your computer and use it in GitHub Desktop.
Save ngtuna/87846a4494afa1a5399b to your computer and use it in GitHub Desktop.
Download ZIP
cf-aws.yml [success with CF-194]
Raw
cf-aws.yml
compilation:
cloud_properties:
availability_zone: ap-southeast-1a
instance_type: c1.medium
network: default
reuse_compilation_vms: true
workers: 6
director_uuid: 033f4548-5756-4c79-9071-1bc1adb69ac8
jobs:
- instances: 1
name: common1
networks:
# - name: floating
# static_ips:
# - 54.254.96.71
- name: default
default: [dns, gateway]
properties:
networks:
apps: default
metron_agent:
zone: ap-southeast-1a
dea_next:
zone: ap-southeast-1a
traffic_controller:
zone: ap-southeast-1a
resource_pool: medium
persistent_disk: 16384
templates:
- name: dea_next
release: cf
- name: nats
release: cf
# - name: uaa
# release: cf
- name: postgres
release: cf
- name: nats_stream_forwarder
release: cf
- name: metron_agent
release: cf
- name: dea_logging_agent
release: cf
- name: loggregator_trafficcontroller
release: cf
- instances: 1
name: uaa_z1
networks:
- name: default
default: [dns, gateway]
properties:
networks:
apps: default
doppler:
zone: ap-southeast-1a
resource_pool: medium
templates:
- name: uaa
release: cf
- name: doppler
release: cf
- instances: 1
name: common2
networks:
# - name: floating
# static_ips:
# - 54.254.96.137
- name: default
default: [dns, gateway]
properties:
metron_agent:
zone: ap-southeast-1a
networks:
apps: default
resource_pool: medium
persistent_disk: 16384
templates:
- name: login
release: cf
- name: collector
release: cf
- name: metron_agent
release: cf
- instances: 1
name: common3
networks:
- name: floating
static_ips:
- 54.251.121.121
- name: default
default: [dns, gateway]
properties:
metron_agent:
zone: ap-southeast-1a
networks:
apps: floating
resource_pool: medium
persistent_disk: 16384
templates:
- name: cloud_controller_ng
release: cf
- name: gorouter
release: cf
- name: metron_agent
release: cf
- name: cloud_controller_worker
release: cf
- name: cloud_controller_clock
release: cf
meta:
environment: aws
releases:
- name: cf
version: latest
stemcell:
name: bosh-aws-xen-ubuntu-trusty-go_agent
version: latest
name: cf-aws
networks:
- name: floating
type: vip
cloud_properties: {}
- name: default
type: dynamic
cloud_properties:
security_groups:
- bosh
properties:
acceptance_tests: null
app_domains:
- 54.251.121.121.xip.io
cc:
allowed_cors_domains: []
app_events:
cutoff_age_in_days: 31
app_usage_events:
cutoff_age_in_days: 31
audit_events:
cutoff_age_in_days: 31
billing_event_writing_enabled: true
broker_client_timeout_seconds: 70
buildpacks:
buildpack_directory_key: bd_key
cdn: null
fog_connection:
provider: Local
local_root: "/var/vcap/data/nfs/shared"
bulk_api_password: password
client_max_body_size: 1536M
db_encryption_key: the_key
db_logging_level: debug2
default_app_disk_in_mb: 512
default_app_memory: 512
default_buildpacks:
- name: java_buildpack
package: buildpack_java
- name: ruby_buildpack
package: buildpack_ruby
- name: nodejs_buildpack
package: buildpack_nodejs
- name: go_buildpack
package: buildpack_go
- name: python_buildpack
package: buildpack_python
- name: php_buildpack
package: buildpack_php
default_quota_definition: default
default_running_security_groups:
- public_networks
- dns
default_staging_security_groups:
- public_networks
- dns
development_mode: false
diego:
running: disabled
staging: optional
diego_docker: false
directories: null
disable_custom_buildpacks: false
droplets:
cdn: null
droplet_directory_key: the_key
fog_connection:
provider: Local
local_root: "/var/vcap/data/nfs/shared"
external_host: api
install_buildpacks:
- name: java_buildpack
package: buildpack_java
- name: ruby_buildpack
package: buildpack_ruby
- name: nodejs_buildpack
package: buildpack_nodejs
- name: go_buildpack
package: buildpack_go
- name: python_buildpack
package: buildpack_python
- name: php_buildpack
package: buildpack_php
internal_api_password: password
internal_api_user: internal_user
jobs:
app_bits_packer:
timeout_in_seconds: null
app_events_cleanup:
timeout_in_seconds: null
app_usage_events_cleanup:
timeout_in_seconds: null
blobstore_delete:
timeout_in_seconds: null
blobstore_upload:
timeout_in_seconds: null
droplet_deletion:
timeout_in_seconds: null
droplet_upload:
timeout_in_seconds: null
generic:
number_of_workers: null
global:
timeout_in_seconds: 14400
model_deletion:
timeout_in_seconds: null
logging_level: debug2
maximum_app_disk_in_mb: 2048
newrelic:
capture_params: false
developer_mode: false
environment_name: null
license_key: null
monitor_mode: false
transaction_tracer:
enabled: true
record_sql: obfuscated
packages:
app_package_directory_key: 54.251.121.121.xip.io-cc-packages
cdn: null
fog_connection:
provider: Local
local_root: "/var/vcap/data/nfs/shared"
max_package_size: 1073741824
quota_definitions:
default:
memory_limit: 10240
non_basic_services_allowed: true
total_routes: 1000
total_services: 100
resource_pool:
cdn: null
fog_connection:
provider: Local
local_root: "/var/vcap/data/nfs/shared"
resource_directory_key: 54.251.121.121.xip.io-cc-resources
security_group_definitions:
- name: public_networks
rules:
- destination: 0.0.0.0-9.255.255.255
protocol: all
- destination: 11.0.0.0-169.253.255.255
protocol: all
- destination: 169.255.0.0-172.15.255.255
protocol: all
- destination: 172.32.0.0-192.167.255.255
protocol: all
- destination: 192.169.0.0-255.255.255.255
protocol: all
- name: dns
rules:
- destination: 0.0.0.0/0
ports: "53"
protocol: tcp
- destination: 0.0.0.0/0
ports: "53"
protocol: udp
srv_api_uri: http://api.54.251.121.121.xip.io
stacks: null
staging_upload_password: password
staging_upload_user: username
system_buildpacks:
- name: java_buildpack
package: buildpack_java
- name: ruby_buildpack
package: buildpack_ruby
- name: nodejs_buildpack
package: buildpack_nodejs
- name: go_buildpack
package: buildpack_go
- name: python_buildpack
package: buildpack_python
- name: php_buildpack
package: buildpack_php
thresholds:
api:
alert_if_above_mb: null
restart_if_above_mb: null
restart_if_consistently_above_mb: null
worker:
alert_if_above_mb: null
restart_if_above_mb: null
restart_if_consistently_above_mb: null
user_buildpacks: []
ccdb:
address: 0.common1.default.cf-aws.microbosh
port: 5524
roles:
- tag: admin
name: ccadmin
password: "c1oudc0w"
databases:
- tag: cc
name: ccdb
citext: true
collector: null
databases: &databases
db_scheme: postgres
address: 0.common1.default.cf-aws.microbosh
port: 5524
roles:
- tag: admin
name: ccadmin
password: "c1oudc0w"
- tag: admin
name: uaaadmin
password: "c1oudc0w"
databases:
- tag: cc
name: ccdb
citext: true
- tag: uaa
name: uaadb
citext: true
dea_next:
allow_networks: []
deny_networks: []
directory_server_protocol: http
default_health_check_timeout: 60
disk_mb: 16384
disk_overcommit_factor: 2
advertise_interval_in_seconds: 5
evacuation_bail_out_time_in_seconds: 600
heartbeat_interval_in_seconds: 10
instance_disk_inode_limit: 200000
kernel_network_tuning_enabled: false
logging_level: debug
memory_mb: 4096
memory_overcommit_factor: 3
staging_disk_inode_limit: 200000
staging_disk_limit_mb: 4096
staging_memory_limit_mb: 1024
description: CitusPaaS by FPTSoftware
disk_quota_enabled: true
domain: 54.251.121.121.xip.io
doppler:
blacklisted_syslog_ranges: null
debug: false
maxRetainedLogMessages: 100
doppler_endpoint:
shared_secret: secret
dropsonde:
enabled: true
etcd:
machines: []
etcd_metrics_server:
nats:
machines: []
password: nats_password
username: nats_user
logger_endpoint: null
loggregator:
blacklisted_syslog_ranges: null
debug: false
maxRetainedLogMessages: 100
loggregator_endpoint:
shared_secret: secret
login:
analytics:
code: null
domain: null
asset_base_url: null
brand: oss
catalina_opts: -Xmx768m -XX:MaxPermSize=256m
enabled: true
invitations_enabled: null
links:
home: http://console.54.251.121.121.xip.io
network: null
passwd: http://console.54.251.121.121.xip.io/password_resets/new
signup: http://console.54.251.121.121.xip.io/register
signup-network: null
messages: null
notifications:
url: null
protocol: http
saml: null
signups_enabled: null
smtp:
host: null
password: null
port: null
user: null
spring_profiles: null
tiles: null
uaa_base: null
uaa_certificate: null
url: null
metron_endpoint:
shared_secret: secret
nats:
address: 0.common1.default.cf-aws.microbosh
debug: false
machines:
- 0.common1.default.cf-aws.microbosh
monitor_port: 0
password: nats
port: 4222
prof_port: 0
trace: false
user: nats
request_timeout_in_seconds: 900
router:
# requested_route_registration_interval_in_seconds: 20
status:
password: router
user: router
smoke_tests: null
ssl:
skip_cert_verify: true
support_address: http://support.cloudfoundry.com
syslog_daemon_config: null
system_domain: 54.251.121.121.xip.io
system_domain_organization: null
template_only:
aws:
access_key_id: *****************
availability_zone: ap-southeast-1a
secret_access_key: *********************************
uaa:
admin:
client_secret: admin_secret
authentication:
policy:
countFailuresWithinSeconds: null
lockoutAfterFailures: null
lockoutPeriodSeconds: null
batch:
password: batch_password
username: batch_username
catalina_opts: -Xmx768m -XX:MaxPermSize=256m
cc:
client_secret: cc_client_secret
clients:
app-direct:
access-token-validity: 1209600
authorities: app_direct_invoice.write
authorized-grant-types: authorization_code,client_credentials,password,refresh_token,implicit
override: true
redirect-uri: http://console.54.251.121.121.xip.io
refresh-token-validity: 1209600
secret: app-direct-secret
developer_console:
access-token-validity: 1209600
authorities: scim.write,scim.read,cloud_controller.read,cloud_controller.write,password.write,uaa.admin,uaa.resource,cloud_controller.admin,billing.admin
authorized-grant-types: authorization_code,client_credentials
override: true
redirect-uri: http://console.54.251.121.121.xip.io/oauth/callback
refresh-token-validity: 1209600
scope: openid,cloud_controller.read,cloud_controller.write,password.write,console.admin,console.support
secret: developer-console-secret
doppler:
secret: doppler-secret
login:
authorities: oauth.login,notifications.write,critical_notifications.write,emails.write
authorized-grant-types: authorization_code,client_credentials,refresh_token
override: true
redirect-uri: http://login.54.251.121.121.xip.io
scope: openid,oauth.approvals
secret: login-secret
notifications:
authorities: cloud_controller.admin,scim.read
authorized-grant-types: client_credentials
secret: notification-secret
servicesmgmt:
authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
authorized-grant-types: authorization_code,client_credentials,password,implicit
autoapprove: true
override: true
redirect-uri: http://servicesmgmt.54.251.121.121.xip.io/auth/cloudfoundry/callback
scope: openid,cloud_controller.read,cloud_controller.write
secret: service-mgmt-secret
space-mail:
access-token-validity: 1209600
authorities: scim.read,scim.write,cloud_controller.admin
authorized-grant-types: client_credentials
override: true
refresh-token-validity: 1209600
secret: space-mail-secret
support-services:
access-token-validity: 1209600
authorities: portal.users.read
authorized-grant-types: authorization_code,client_credentials
redirect-uri: http://support-signon.54.251.121.121.xip.io
refresh-token-validity: 1209600
scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
secret: support-services-secret
jwt:
signing_key: |
-----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1
JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6
0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB
AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA
Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0
KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J
duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE
xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8
+5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek
lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h
jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh
HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+
4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=
-----END RSA PRIVATE KEY-----
verification_key: |
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
spULZVNRxq7veq/fzwIDAQAB
-----END PUBLIC KEY-----
ldap: null
login: null
no_ssl: true
scim:
external_groups: null
userids_enabled: false
users:
- admin|password|scim.write,scim.read,openid,cloud_controller.admin,doppler.firehose
spring_profiles: postgresql
url: http://uaa.54.251.121.121.xip.io
user: null
uaadb:
db_scheme: postgresql
address: 0.common1.default.cf-aws.microbosh
port: 5524
roles:
- tag: admin
name: uaaadmin
password: "c1oudc0w"
databases:
- tag: uaa
name: uaadb
citext: true
releases:
- name: cf
version: latest
resource_pools:
- cloud_properties:
availability_zone: ap-southeast-1a
instance_type: m1.medium
name: medium
network: default
size: 4
stemcell:
name: bosh-aws-xen-ubuntu-trusty-go_agent
version: latest
update:
canaries: 1
canary_watch_time: 30000-600000
max_in_flight: 1
serial: true
update_watch_time: 5000-600000
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment