tools/salt-install/config_examples/multi_host/aws/pillars/arvados_development.sls

   1 # -*- coding: utf-8 -*-
   2 # vim: ft=yaml
   3 ---
   4 # Copyright (C) The Arvados Authors. All rights reserved.
   5 #
   6 # SPDX-License-Identifier: AGPL-3.0
   7
   8 # This config file is used to test a multi-node deployment using a local
   9 # dispatcher. This setup is not recommended for production use.
  10
  11 # The variables commented out are the default values that the formula uses.
  12 # The uncommented values are REQUIRED values. If you don't set them, running
  13 # this formula will fail.
  14 arvados:
  15   ### GENERAL CONFIG
  16   version: '__VERSION__'
  17   ## It makes little sense to disable this flag, but you can, if you want :)
  18   # use_upstream_repo: true
  19
  20   ## Repo URL is built with grains values. If desired, it can be completely
  21   ## overwritten with the pillar parameter 'repo_url'
  22   # repo:
  23   #   humanname: Arvados Official Repository
  24
  25   release: __RELEASE__
  26
  27   ## IMPORTANT!!!!!
  28   ## api, workbench and shell require some gems, so you need to make sure ruby
  29   ## and deps are installed in order to install and compile the gems.
  30   ## We default to `false` in these two variables as it's expected you already
  31   ## manage OS packages with some other tool and you don't want us messing up
  32   ## with your setup.
  33   ruby:
  34     ## We set these to `true` here for testing purposes.
  35     ## They both default to `false`.
  36     manage_ruby: true
  37     manage_gems_deps: true
  38     # pkg: ruby
  39     # gems_deps:
  40     #     - curl
  41     #     - g++
  42     #     - gcc
  43     #     - git
  44     #     - libcurl4
  45     #     - libcurl4-gnutls-dev
  46     #     - libpq-dev
  47     #     - libxml2
  48     #     - libxml2-dev
  49     #     - make
  50     #     - python3-dev
  51     #     - ruby-dev
  52     #     - zlib1g-dev
  53
  54   # config:
  55   #   file: /etc/arvados/config.yml
  56   #   user: root
  57   ## IMPORTANT!!!!!
  58   ## If you're intalling any of the rails apps (api, workbench), the group
  59   ## should be set to that of the web server, usually `www-data`
  60   #   group: root
  61   #   mode: 640
  62
  63   ### ARVADOS CLUSTER CONFIG
  64   cluster:
  65     name: __CLUSTER__
  66     domain: __DOMAIN__
  67
  68     database:
  69       # max concurrent connections per arvados server daemon
  70       # connection_pool_max: 32
  71       name: __CLUSTER___arvados
  72       host: 127.0.0.1
  73       password: "__DATABASE_PASSWORD__"
  74       user: __CLUSTER___arvados
  75       extra_conn_params:
  76         client_encoding: UTF8
  77       # Centos7 does not enable SSL by default, so we disable
  78       # it here just for testing of the formula purposes only.
  79       # You should not do this in production, and should
  80       # configure Postgres certificates correctly
  81       {%- if grains.os_family in ('RedHat',) %}
  82         sslmode: disable
  83       {%- endif %}
  84
  85     tls:
  86       # certificate: ''
  87       # key: ''
  88       # When using arvados-snakeoil certs set insecure: true
  89       insecure: true
  90
  91     resources:
  92       virtual_machines:
  93         shell:
  94           name: shell
  95           backend: __SHELL_INT_IP__
  96           port: 4200
  97
  98     ### TOKENS
  99     tokens:
 100       system_root: __SYSTEM_ROOT_TOKEN__
 101       management: __MANAGEMENT_TOKEN__
 102       anonymous_user: __ANONYMOUS_USER_TOKEN__
 103
 104     ### KEYS
 105     secrets:
 106       blob_signing_key: __BLOB_SIGNING_KEY__
 107       workbench_secret_key: __WORKBENCH_SECRET_KEY__
 108
 109     Login:
 110       Test:
 111         Enable: true
 112         Users:
 113           __INITIAL_USER__:
 114             Email: __INITIAL_USER_EMAIL__
 115             Password: __INITIAL_USER_PASSWORD__
 116
 117     ### VOLUMES
 118     ## This should usually match all your `keepstore` instances
 119     Volumes:
 120       # the volume name will be composed with
 121       # <cluster>-nyw5e-<volume>
 122       __CLUSTER__-nyw5e-000000000000000:
 123         AccessViaHosts:
 124           'http://__KEEPSTORE0_INT_IP__:25107':
 125             ReadOnly: false
 126         Replication: 2
 127         Driver: Directory
 128         DriverParameters:
 129           Root: /tmp
 130       __CLUSTER__-nyw5e-000000000000001:
 131         AccessViaHosts:
 132           'http://__KEEPSTORE1_INT_IP__:25107':
 133             ReadOnly: false
 134         Replication: 2
 135         Driver: Directory
 136         DriverParameters:
 137           Root: /tmp
 138
 139     Containers:
 140       LocalKeepBlobBuffersPerVCPU: 0
 141
 142     Users:
 143       NewUsersAreActive: true
 144       AutoAdminFirstUser: true
 145       AutoSetupNewUsers: true
 146       AutoSetupNewUsersWithRepository: true
 147
 148     Services:
 149       Controller:
 150         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 151         InternalURLs:
 152           'http://localhost:8003': {}
 153       Keepbalance:
 154         InternalURLs:
 155           'http://__CONTROLLER_INT_IP__:9005': {}
 156       Keepproxy:
 157         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__KEEP_EXT_SSL_PORT__'
 158         InternalURLs:
 159           'http://__KEEP_INT_IP__:25100': {}
 160       Keepstore:
 161         InternalURLs:
 162           'http://__KEEPSTORE0_INT_IP__:25107': {}
 163           'http://__KEEPSTORE1_INT_IP__:25107': {}
 164       RailsAPI:
 165         InternalURLs:
 166           'http://localhost:8004': {}
 167       WebDAV:
 168         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__'
 169         InternalURLs:
 170           'http://localhost:9002': {}
 171       WebDAVDownload:
 172         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__'
 173       WebShell:
 174         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__WEBSHELL_EXT_SSL_PORT__'
 175       Websocket:
 176         ExternalURL: 'wss://__CLUSTER__.__DOMAIN__:__WEBSOCKET_EXT_SSL_PORT__/websocket'
 177         InternalURLs:
 178           'http://__WEBSOCKET_INT_IP__:8005': {}
 179       Workbench1:
 180         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__WORKBENCH1_EXT_SSL_PORT__'
 181       Workbench2:
 182         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__WORKBENCH2_EXT_SSL_PORT__'