cf-openstack.yml

cf-openstack.yml

---
name: cf-openstack
director_uuid: 24d60d8a-e839-4ef5-a41d-c86013f31c37
 
releases:
 - name: cf
   version: 175+dev.1
 
compilation:
  workers: 6
  network: default
  reuse_compilation_vms: true
  cloud_properties:
    instance_type: m1.medium
 
update:
  canaries: 1
  canary_watch_time: 30000-600000
  update_watch_time: 30000-600000
  max_in_flight: 4
  max_errors: 1
 
networks:
  - name: floating
    type: vip
    cloud_properties: {}
    type: dynamic
    cloud_properties:
      security_groups:
      - cf
resource_pools:
  - name: small
    network: default
    size: 2
    stemcell:
      name: bosh-stemcell
      version: 2579
    cloud_properties:
      instance_type: m1.small
 
  - name: medium
    network: default
    size: 1
    stemcell:
      name: bosh-stemcell
      version: 2579
    cloud_properties:
      instance_type: m1.medium
 
jobs:
  - name: common1
    template:
      - syslog_aggregator
      - nats
      - postgres
      - dea_next
      - uaa
    instances: 1
    resource_pool: medium
    persistent_disk: 16384
    networks:
      - name: default
        default: [dns, gateway]
    properties:
      db: databases
 
  - name: common2
    template:
      - login
      - health_manager_next
      - collector
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
 
  - name: common3
    template:
      - cloud_controller_ng
      - gorouter
    instances: 1
    resource_pool: small
    networks:
      - name: default
        default: [dns, gateway]
      - name: floating
        static_ips:
          - 172.20.217.140
    properties:
      ccdb: ccdb
 
properties:
  domain: yourdomain.com
  system_domain: yourdomain.com
  system_domain_organization: system_domain
  app_domains:
    - yourdomain.com
 
  networks:
    apps: default
    management: default
 
  nats:
    address: 0.common1.default.cf-openstack.bosh
    port: 4222
    user: nats
    password: "c1oudc0w"
    authorization_timeout: 5
 
  router:
    port: 8081
    status:
      port: 8080
      user: gorouter
      password: "c1oudc0w"
 
  dea: &dea
    max_memory: 4096
    memory_mb: 4084
    memory_overcommit_factor: 4
    disk_mb: 16384
    disk_overcommit_factor: 4
 
  dea_next: *dea
 
  service_lifecycle:
    serialization_data_server:
    - 169.254.1.1 
 
  syslog_aggregator:
    address: 0.syslog-aggregator.default.cf-openstack.bosh
    port: 54321
 
  serialization_data_server:
    port: 8080
    logging_level: debug
    upload_token: 8f7COGvThwlmulIzAgOHxMXurBrG364k
    upload_timeout: 10
 
  collector:
    deployment_name: cf-aws
    use_tsdb: false
    use_aws_cloudwatch: false
    use_datadog: false
 
  databases: &databases
    db_scheme: postgres
    address: 0.common1.default.cf-openstack.bosh
    port: 5524
    roles:
      - tag: admin
        name: ccadmin
        password: "c1oudc0w"
      - tag: admin
        name: uaaadmin
        password: "c1oudc0w"
    databases:
      - tag: cc
        name: ccdb
        citext: true
      - tag: uaa
        name: uaadb
        citext: true
 
  ccdb: &ccdb
    db_scheme: postgres
    address: 0.common1.default.cf-openstack.bosh
    port: 5524
    roles:
      - tag: admin
        name: ccadmin
        password: "c1oudc0w"
    databases:
      - tag: cc
        name: ccdb
        citext: true
 
  ccdb_ng: *ccdb
 
  uaadb: 
    db_scheme: postgresql
    address: 0.common1.default.cf-openstack.bosh
    port: 5524
    roles:
      - tag: admin
        name: uaaadmin
        password: "c1oudc0w"
    databases:
      - tag: uaa
        name: uaadb
        citext: true
 
  cc_api_version: v2
 
  cc: &cc
    logging_level: debug
    external_host: ccng
    srv_api_uri: http://api.yourdomain.com
    cc_partition: default
    db_encryption_key: "b963127302433579"
    bootstrap_admin_email: "[email protected]"
    bulk_api_password: "c1oudc0w"
    uaa_resource_id: cloud_controller
    staging_upload_user: uploaduser
    staging_upload_password: c1oudc0w
    resource_pool:
      resource_directory_key: yourdomain-com-cc-resources
    packages:
      app_package_directory_key: yourdomain-com-cc-packages
    droplets:
      droplet_directory_key: yourdomain-com-cc-droplets
 
  ccng: *cc
 
  login:
    protocol: http
    links:
      home: http://console.yourdomain.com
      passwd: http://console.yourdomain.com/password_resets/new
      signup: http://console.yourdomain.com/register
 
  uaa:
    url: http://uaa.yourdomain.com
    spring_profiles: postgresql
    no_ssl: true
    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
    resource_id: account_manager
    jwt:
      signing_key: |
        -----BEGIN RSA PRIVATE KEY-----
        MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1
        JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6
        0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB
        AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA
        Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0
        KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J
        duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE
        xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8
        +5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek
        lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h
        jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh
        HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+
        4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=
        -----END RSA PRIVATE KEY-----
      verification_key: |
        -----BEGIN PUBLIC KEY-----
        MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
        KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
        qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
        spULZVNRxq7veq/fzwIDAQAB
        -----END PUBLIC KEY-----
    cc:
      client_secret: "c1oudc0w"
    admin:
      client_secret: "c1oudc0w"
    batch:
      username: batchuser
      password: c1oudc0w
    client:
      autoapprove:
        - cf
        - vmc
        - my
        - micro
        - support-signon
        - login
    clients:
      login:
        override: true
        scope: openid
        authorities: oauth.login
        secret: c1oudc0w
        authorized-grant-types: authorization_code,client_credentials,refresh_token
        redirect-uri: http://login.yourdomain.com
      support-services:
        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
        secret: ssosecretsso
        authorized-grant-types: authorization_code,client_credentials
        redirect-uri: http://support-signon.yourdomain.com
        authorities: portal.users.read
        access-token-validity: 1209600
        refresh-token-validity: 1209600
      vmc:
        override: true
        authorized-grant-types: password,implicit
        authorities: uaa.none
        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
      cf:
        override: true
        authorized-grant-types: password,implicit,refresh_token
        authorities: uaa.none
        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
      servicesmgmt:
        override: true
        secret: serivcesmgmtsecret
        scope: openid,cloud_controller.read,cloud_controller.write
        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
        authorized-grant-types: authorization_code,client_credentials,password,implicit
        redirect-uri: http://servicesmgmt.yourdomain.com/auth/cloudfoundry/callback
        autoapprove: true
    scim:
      users:
      - admin|c1oudc0w|scim.write,scim.read,openid,cloud_controller.admin
      - services|c1oudc0w|scim.write,scim.read,openid,cloud_controller.admin