fix(config): ensure AnonymousUserToken is set
[arvados-formula.git] / test / salt / pillar / arvados_dev.sls
1 # -*- coding: utf-8 -*-
2 # vim: ft=yaml
3 ---
4 # The variables commented out are the default values that the formula uses.
5 # The uncommented values are REQUIRED values. If you don't set them, running
6 # this formula will fail.
7 arvados:
8   ### GENERAL CONFIG
9   # version: '2.0.4'
10   ## It makes little sense to disable this flag, but you can, if you want :)
11   # use_upstream_repo: true
12
13   ## Repo URL is built with grains values. If desired, it can be completely
14   ## overwritten with the pillar parameter 'repo_url'
15   # repo:
16   #   humanname: Arvados Official Repository
17
18   release: development
19
20   ## IMPORTANT!!!!!
21   ## api, workbench and shell require some gems, so you need to make sure ruby
22   ## and deps are installed in order to install and compile the gems.
23   ## We default to `false` in these two variables as it's expected you already
24   ## manage OS packages with some other tool and you don't want us messing up
25   ## with your setup.
26   ruby:
27     ## We set these to `true` here for testing purposes.
28     ## They both default to `false`.
29     manage_ruby: true
30     manage_gems_deps: true
31     # pkg: ruby
32     # gems_deps:
33     #     - curl
34     #     - g++
35     #     - gcc
36     #     - git
37     #     - libcurl4
38     #     - libcurl4-gnutls-dev
39     #     - libpq-dev
40     #     - libxml2
41     #     - libxml2-dev
42     #     - make
43     #     - python3-dev
44     #     - ruby-dev
45     #     - zlib1g-dev
46
47   # config:
48   #   file: /etc/arvados/config.yml
49   #   user: root
50   ## IMPORTANT!!!!!
51   ## If you're intalling any of the rails apps (api, workbench), the group
52   ## should be set to that of the web server, usually `www-data`
53   #   group: root
54   #   mode: 640
55
56   ### ARVADOS CLUSTER CONFIG
57   cluster:
58     name: fixme
59     domain: example.net
60
61     database:
62       # max concurrent connections per arvados server daemon
63       # connection_pool_max: 32
64       name: arvados
65       host: 127.0.0.1
66       password: changeme_arvados
67       user: arvados
68       extra_conn_params:
69         client_encoding: UTF8
70       # Centos7 does not enable SSL by default, so we disable
71       # it here just for testing of the formula purposes only.
72       # You should not do this in production, and should
73       # configure Postgres certificates correctly
74       {%- if grains.os_family in ('RedHat',) %}
75         sslmode: disable
76       {%- endif %}
77
78     tls:
79       # certificate: ''
80       # key: ''
81       # required to test with snakeoil certs
82       insecure: true
83
84     ### TOKENS
85     tokens:
86       system_root: changemesystemroottoken
87       management: changememanagementtoken
88
89     ### KEYS
90     secrets:
91       blob_signing_key: changemeblobsigningkey
92       workbench_secret_key: changemeworkbenchsecretkey
93       dispatcher_access_key: changemedispatcheraccesskey
94       dispatcher_secret_key: changemedispatchersecretkey
95       keep_access_key: changemekeepaccesskey
96       keep_secret_key: changemekeepsecretkey
97
98     AuditLogs:
99       Section_to_ignore:
100         - some_random_value
101
102     ### VOLUMES
103     ## This should usually match all your `keepstore` instances
104     Volumes:
105       # the volume name will be composed with
106       # <cluster>-nyw5e-<volume>
107       fixme-nyw5e-000000000000000:
108         AccessViaHosts:
109           http://keep0.fixme.example.net:25107:
110             ReadOnly: false
111         Replication: 2
112         Driver: Directory
113         DriverParameters:
114           Root: /tmp
115
116     Users:
117       AnonymousUserToken: anonymoususertokensetintheusersdict
118       NewUsersAreActive: true
119       AutoAdminFirstUser: true
120       AutoSetupNewUsers: true
121       AutoSetupNewUsersWithRepository: true
122
123     Services:
124       Controller:
125         ExternalURL: https://fixme.example.net
126         InternalURLs:
127           http://controller.internal:8003: {}
128       DispatchCloud:
129         InternalURLs:
130           http://fixme.example.net:9006: {}
131       Keepbalance:
132         InternalURLs:
133           http://fixme.example.net:9005: {}
134       Keepproxy:
135         ExternalURL: https://keep.fixme.example.net
136         InternalURLs:
137           http://keep.internal:25100: {}
138       Keepstore:
139         InternalURLs:
140           http://keep0.fixme.example.net:25107: {}
141       RailsAPI:
142         InternalURLs:
143           http://api.internal:8004: {}
144       WebDAV:
145         ExternalURL: https://collections.fixme.example.net
146         InternalURLs:
147           http://collections.internal:9002: {}
148       WebDAVDownload:
149         ExternalURL: https://download.fixme.example.net
150       WebShell:
151         ExternalURL: https://webshell.fixme.example.net
152       Websocket:
153         ExternalURL: wss://ws.fixme.example.net/websocket
154         InternalURLs:
155           http://ws.internal:8005: {}
156       Workbench1:
157         ExternalURL: https://workbench.fixme.example.net
158       Workbench2:
159         ExternalURL: https://workbench2.fixme.example.net