tools/salt-install/config_examples/single_host/multiple_hostnames/pillars/arvados.sls

   1 # -*- coding: utf-8 -*-
   2 # vim: ft=yaml
   3 ---
   4 # Copyright (C) The Arvados Authors. All rights reserved.
   5 #
   6 # SPDX-License-Identifier: AGPL-3.0
   7
   8 # The variables commented out are the default values that the formula uses.
   9 # The uncommented values are REQUIRED values. If you don't set them, running
  10 # this formula will fail.
  11 arvados:
  12   ### GENERAL CONFIG
  13   version: '__VERSION__'
  14   ## It makes little sense to disable this flag, but you can, if you want :)
  15   # use_upstream_repo: true
  16
  17   ## Repo URL is built with grains values. If desired, it can be completely
  18   ## overwritten with the pillar parameter 'repo_url'
  19   # repo:
  20   #   humanname: Arvados Official Repository
  21
  22   release: __RELEASE__
  23
  24   ## IMPORTANT!!!!!
  25   ## api, workbench and shell require some gems, so you need to make sure ruby
  26   ## and deps are installed in order to install and compile the gems.
  27   ## We default to `false` in these two variables as it's expected you already
  28   ## manage OS packages with some other tool and you don't want us messing up
  29   ## with your setup.
  30   ruby:
  31     pkg: ruby-2.7.2
  32
  33     ## We set these to `true` here for testing purposes.
  34     ## They both default to `false`.
  35     manage_ruby: true
  36     manage_gems_deps: true
  37     # pkg: ruby
  38     # gems_deps:
  39     #     - curl
  40     #     - g++
  41     #     - gcc
  42     #     - git
  43     #     - libcurl4
  44     #     - libcurl4-gnutls-dev
  45     #     - libpq-dev
  46     #     - libxml2
  47     #     - libxml2-dev
  48     #     - make
  49     #     - python3-dev
  50     #     - ruby-dev
  51     #     - zlib1g-dev
  52
  53   # config:
  54   #   file: /etc/arvados/config.yml
  55   #   user: root
  56   ## IMPORTANT!!!!!
  57   ## If you're intalling any of the rails apps (api, workbench), the group
  58   ## should be set to that of the web server, usually `www-data`
  59   #   group: root
  60   #   mode: 640
  61
  62   ### ARVADOS CLUSTER CONFIG
  63   cluster:
  64     name: __CLUSTER__
  65     domain: __DOMAIN__
  66
  67     database:
  68       # max concurrent connections per arvados server daemon
  69       # connection_pool_max: 32
  70       name: __CLUSTER___arvados
  71       host: 127.0.0.1
  72       password: "__DATABASE_PASSWORD__"
  73       user: __CLUSTER___arvados
  74       extra_conn_params:
  75         client_encoding: UTF8
  76       # Centos7 does not enable SSL by default, so we disable
  77       # it here just for testing of the formula purposes only.
  78       # You should not do this in production, and should
  79       # configure Postgres certificates correctly
  80       {%- if grains.os_family in ('RedHat',) %}
  81         sslmode: disable
  82       {%- endif %}
  83
  84     tls:
  85       # certificate: ''
  86       # key: ''
  87       # required to test with arvados-snakeoil certs
  88       insecure: true
  89
  90     resources:
  91       virtual_machines:
  92         shell:
  93           name: webshell
  94           backend: 127.0.1.1
  95           port: 4200
  96
  97     ### TOKENS
  98     tokens:
  99       system_root: __SYSTEM_ROOT_TOKEN__
 100       management: __MANAGEMENT_TOKEN__
 101       anonymous_user: __ANONYMOUS_USER_TOKEN__
 102
 103     ### KEYS
 104     secrets:
 105       blob_signing_key: __BLOB_SIGNING_KEY__
 106       workbench_secret_key: __WORKBENCH_SECRET_KEY__
 107
 108     Login:
 109       Test:
 110         Enable: true
 111         Users:
 112           __INITIAL_USER__:
 113             Email: __INITIAL_USER_EMAIL__
 114             Password: __INITIAL_USER_PASSWORD__
 115
 116     ### VOLUMES
 117     ## This should usually match all your `keepstore` instances
 118     Volumes:
 119       # the volume name will be composed with
 120       # <cluster>-nyw5e-<volume>
 121       __CLUSTER__-nyw5e-000000000000000:
 122         AccessViaHosts:
 123           'http://keep0.__CLUSTER__.__DOMAIN__:25107':
 124             ReadOnly: false
 125         Replication: 2
 126         Driver: Directory
 127         DriverParameters:
 128           Root: /tmp
 129
 130     Users:
 131       NewUsersAreActive: true
 132       AutoAdminFirstUser: true
 133       AutoSetupNewUsers: true
 134       AutoSetupNewUsersWithRepository: true
 135
 136     Services:
 137       Controller:
 138         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 139         InternalURLs:
 140           'http://controller.internal:8003': {}
 141       DispatchCloud:
 142         InternalURLs:
 143           'http://__CLUSTER__.__DOMAIN__:9006': {}
 144       Keepbalance:
 145         InternalURLs:
 146           'http://__CLUSTER__.__DOMAIN__:9005': {}
 147       Keepproxy:
 148         ExternalURL: 'https://keep.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 149         InternalURLs:
 150           'http://keep.internal:25100': {}
 151       Keepstore:
 152         InternalURLs:
 153           'http://keep0.__CLUSTER__.__DOMAIN__:25107': {}
 154       RailsAPI:
 155         InternalURLs:
 156           'http://api.internal:8004': {}
 157       WebDAV:
 158         ExternalURL: 'https://collections.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 159         InternalURLs:
 160           'http://collections.internal:9002': {}
 161       WebDAVDownload:
 162         ExternalURL: 'https://download.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 163       WebShell:
 164         ExternalURL: 'https://webshell.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 165       Websocket:
 166         ExternalURL: 'wss://ws.__CLUSTER__.__DOMAIN__/websocket'
 167         InternalURLs:
 168           'http://ws.internal:8005': {}
 169       Workbench1:
 170         ExternalURL: 'https://workbench.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 171       Workbench2:
 172         ExternalURL: 'https://workbench2.__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'