cloudfoundry-minimum-manifest.yml

---
name: cfos
director_uuid: XXXX-XXXX-XXXX-XXXX # CHANGE

release:
  name: appcloud
  version: 128

compilation:
 workers: 3
 network: default
 reuse_compilation_vms: true
 cloud_properties:
    instance_type: m1.small2

update:
  canaries: 1
  canary_watch_time: 3000-90000
  update_watch_time: 3000-90000
  max_in_flight: 1
  max_errors: 1

cloud:
 plugin: openstack
 properties:
    openstack:
      auth_url: http://10.21.55.30:5000/v2.0/tokens     # OS_AUTH_URL/tokens
      username: userexa                          # OS_USERNAME
      api_key: userexa                           # OS_PASSWORD
      tenant: userexa                            # OS_TENANT_NAME
      default_key_name: bosh-key                 # 作成したキーの名前
      default_security_groups: ["default"]
      private_key: /root/.ssh/bosh-key.pem       # 作成した秘密鍵


networks:
  - name: floating
    type: vip
    cloud_properties: {}
  - name: default
    type: dynamic
    dns:
      - 192.168.30.13 # CHANGE: BOSH powerdns ip
    cloud_properties:
      security_groups:
      - default

resource_pools:
- name: infrastructure
  stemcell:
    name: bosh-stemcell
    version: 0.7.0
  network: default
  size: 8
  cloud_properties:
    instance_type: m1.small2
  env:
    bosh:
      # "a".crypt("$1$salt")
      password: $1$salt$M17PcHxFIEt5v7SAsS4v60


jobs:

## database storage

- name: nats
  template: nats
  instances: 1
  resource_pool: infrastructure
  networks:
    - name: default
      default: [dns, gateway]

- name: database
  template: postgres
  instances: 1
  resource_pool: infrastructure
  persistent_disk: 8192
  properties:
    db: database
  networks:
    - name: default
      default: [dns, gateway]

## core component

- name: cloud_controller
  template: cloud_controller
  instances: 1
  resource_pool: infrastructure
  properties:
    db: database
  networks:
    - name: default
      default: [dns, gateway]

- name: stager
  template: stager
  instances: 1
  resource_pool: infrastructure
  networks:
    - name: default
      default: [dns, gateway]

- name: router
  template: router
  instances: 1
  resource_pool: infrastructure
  networks:
    - name: default
      default: [dns, gateway]
    - name: floating
      static_ips:
      - 10.21.55.27

- name: uaa
  template: uaa
  instances: 1
  resource_pool: infrastructure
  properties:
    db: database
  networks:
    - name: default
      default: [dns, gateway]

- name: health_manager
  template: health_manager_next
  instances: 1
  resource_pool: infrastructure
  networks:
    - name: default
      default: [dns, gateway]

## dea

- name: dea
  template: dea
  instances: 1
  resource_pool: infrastructure
  networks:
    - name: default
      default: [dns, gateway]


properties:
  domain: cf.example
  
  env:
    http_proxy: "http://proxygate1.example.jp:8080"
    https_proxy: "http://proxygate1.example.jp:8080"
    # Director IP and cfos deployment domain
    no_proxy: "192.168.30.12,.cfos.bosh"

  networks:
      apps: default
      management: default

  nats:
      user: nats
      password: aaa3ij3122
      address: 0.nats.default.cfos.bosh
      port: 4222

  database: &database
    address: 0.database.default.cfos.bosh
    port: 5432
    roles:
    - tag: admin
      name: alladmin
      password: aaaBauWauZZb2
    databases:
    - tag: cc
      name: ccdb
    - tag: uaa
      name: uaadb

  ccdb: *database
  uaadb: *database

  cc:
    srv_api_uri: http://api.cf.example.jp
    password: aaauuLaap44jadlas2l312lk
    token: aaaf4eaa8c1758f66d5cb7adcb24adb9d7
    use_nginx: true
    new_stager_percent: 100
    new_stager_email_regexp: '.*@.*.example.jp'
    staging_upload_user: aaafhgjg
    staging_upload_password: aaafdase9
    allow_registration: true
    logging_level: debug
    uaa:
      enabled: true
      resource_id: cloud_controller
      token_creation_email_filter: example.jp
    admins:
    - [email protected]

  router:
    status:
      port: 8080
      user: aaaUxXlS0pc71wVef
      password: aaamaIf9vPV4mJyBe

  dea:
    max_memory: 1024

  stager:
    max_staging_duration: 120
    max_active_tasks: 20
    queues:
    - staging

  uaa:
    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
    cc:
      token_secret: aaabxaiC371JM     # Create your own token secret
      client_secret: ccsecret # Create your own client secret       
    clients:
      dashboard:
        secret: passwordpassword01
        scope: openid,dashboard.user
        authorities: uaa.admin,uaa.resource,tokens.read,scim.read,scim.write
        authorized-grant-types: client_credentials,authorization_code,refresh_token
    admin:
      client_secret: adminsecret # Create your own client secret          
    login:
      client_secret: loginsecret
    batch:
      username: root  # Create a username
      password: passwordpassword01 # Create a password
    scim:
      userids_enabled: true
      users:
      - root|admin|openid,dashboard.user