1 # -*- coding: utf-8 -*-
4 # Copyright (C) The Arvados Authors. All rights reserved.
6 # SPDX-License-Identifier: AGPL-3.0
8 # The variables commented out are the default values that the formula uses.
9 # The uncommented values are REQUIRED values. If you don't set them, running
10 # this formula will fail.
13 version: '__VERSION__'
14 ## It makes little sense to disable this flag, but you can, if you want :)
15 # use_upstream_repo: true
17 ## Repo URL is built with grains values. If desired, it can be completely
18 ## overwritten with the pillar parameter 'repo_url'
20 # humanname: Arvados Official Repository
25 ## api, workbench and shell require some gems, so you need to make sure ruby
26 ## and deps are installed in order to install and compile the gems.
27 ## We default to `false` in these two variables as it's expected you already
28 ## manage OS packages with some other tool and you don't want us messing up
31 ## We set these to `true` here for testing purposes.
32 ## They both default to `false`.
34 manage_gems_deps: true
42 # - libcurl4-gnutls-dev
52 # file: /etc/arvados/config.yml
55 ## If you're intalling any of the rails apps (api, workbench), the group
56 ## should be set to that of the web server, usually `www-data`
61 name: arvados-dispatch-cloud
63 name: arvados-dispatch-cloud
65 ### ARVADOS CLUSTER CONFIG
71 # max concurrent connections per arvados server daemon
72 # connection_pool_max: 32
73 name: __CLUSTER___arvados
74 host: __DATABASE_INT_IP__
75 password: "__DATABASE_PASSWORD__"
76 user: __CLUSTER___arvados
79 # Centos7 does not enable SSL by default, so we disable
80 # it here just for testing of the formula purposes only.
81 # You should not do this in production, and should
82 # configure Postgres certificates correctly
83 {%- if grains.os_family in ('RedHat',) %}
90 # When using arvados-snakeoil certs set insecure: true
97 backend: __SHELL_INT_IP__
102 system_root: __SYSTEM_ROOT_TOKEN__
103 management: __MANAGEMENT_TOKEN__
104 anonymous_user: __ANONYMOUS_USER_TOKEN__
108 blob_signing_key: __BLOB_SIGNING_KEY__
109 workbench_secret_key: __WORKBENCH_SECRET_KEY__
116 Email: __INITIAL_USER_EMAIL__
117 Password: __INITIAL_USER_PASSWORD__
124 Name: __CLUSTER__-compute-node
125 BootProbeCommand: 'systemctl is-system-running'
126 ImageID: ami-FIXMEFIXMEFIXMEFI
132 ### This SG should allow SSH from the dispatcher to the compute nodes
133 SecurityGroupIDs: ['sg-FIXMEFIXMEFIXMEFI']
134 SubnetID: subnet-FIXMEFIXMEFIXMEFI
135 DispatchPrivateKey: |
136 -----BEGIN OPENSSH PRIVATE KEY-----
137 Read https://doc.arvados.org/install/crunch2-cloud/install-compute-node.html#sshkeypair
138 for details on how to create this key.
140 -----END OPENSSH PRIVATE KEY-----
143 ## This should usually match all your `keepstore` instances
145 # the volume name will be composed with
146 # <cluster>-nyw5e-<volume>
147 __CLUSTER__-nyw5e-000000000000000:
151 Bucket: __CLUSTER__-nyw5e-000000000000000-volume
152 IAMRole: __CLUSTER__-keepstore-00-iam-role
154 __CLUSTER__-nyw5e-0000000000000001:
158 Bucket: __CLUSTER__-nyw5e-000000000000001-volume
159 IAMRole: __CLUSTER__-keepstore-01-iam-role
163 NewUsersAreActive: true
164 AutoAdminFirstUser: true
165 AutoSetupNewUsers: true
166 AutoSetupNewUsersWithRepository: true
170 ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
172 'http://localhost:8003': {}
175 'http://__CONTROLLER_INT_IP__:9006': {}
178 'http://localhost:9005': {}
180 ExternalURL: 'https://keep.__CLUSTER__.__DOMAIN__:__KEEP_EXT_SSL_PORT__'
182 'http://localhost:25107': {}
185 'http://__KEEPSTORE0_INT_IP__:25107': {}
186 'http://__KEEPSTORE1_INT_IP__:25107': {}
189 'http://localhost:8004': {}
191 ExternalURL: 'https://*.collections.__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__/'
193 'http://localhost:9002': {}
195 ExternalURL: 'https://download.__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__'
197 ExternalURL: 'https://webshell.__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__'
199 ExternalURL: 'wss://ws.__CLUSTER__.__DOMAIN__/websocket'
201 'http://localhost:8005': {}
203 ExternalURL: 'https://workbench.__CLUSTER__.__DOMAIN__:__WORKBENCH1_EXT_SSL_PORT__'
205 ExternalURL: 'https://workbench2.__CLUSTER__.__DOMAIN__:__WORKBENCH2_EXT_SSL_PORT__'
209 ProviderType: t3.small
215 ProviderType: c5.large
221 ProviderType: m5.large
227 ProviderType: c5.xlarge
233 ProviderType: m5.xlarge
239 ProviderType: m5.xlarge
245 ProviderType: c5.2xlarge
251 ProviderType: m5.2xlarge
257 ProviderType: c5.4xlarge
263 ProviderType: m5.4xlarge