tools/salt-install/config_examples/multi_host/aws/pillars/arvados_development.sls

   1 # -*- coding: utf-8 -*-
   2 # vim: ft=yaml
   3 ---
   4 # Copyright (C) The Arvados Authors. All rights reserved.
   5 #
   6 # SPDX-License-Identifier: AGPL-3.0
   7
   8 # This config file is used to test a multi-node deployment using a local
   9 # dispatcher. This setup is not recommended for production use.
  10
  11 # The variables commented out are the default values that the formula uses.
  12 # The uncommented values are REQUIRED values. If you don't set them, running
  13 # this formula will fail.
  14 arvados:
  15   ### GENERAL CONFIG
  16   version: '__VERSION__'
  17   ## It makes little sense to disable this flag, but you can, if you want :)
  18   # use_upstream_repo: true
  19
  20   ## Repo URL is built with grains values. If desired, it can be completely
  21   ## overwritten with the pillar parameter 'repo_url'
  22   # repo:
  23   #   humanname: Arvados Official Repository
  24
  25   release: __RELEASE__
  26
  27   ## IMPORTANT!!!!!
  28   ## api, workbench and shell require some gems, so you need to make sure ruby
  29   ## and deps are installed in order to install and compile the gems.
  30   ## We default to `false` in these two variables as it's expected you already
  31   ## manage OS packages with some other tool and you don't want us messing up
  32   ## with your setup.
  33   ruby:
  34     ## We set these to `true` here for testing purposes.
  35     ## They both default to `false`.
  36     manage_ruby: true
  37     manage_gems_deps: true
  38     # pkg: ruby
  39     # gems_deps:
  40     #     - curl
  41     #     - g++
  42     #     - gcc
  43     #     - git
  44     #     - libcurl4
  45     #     - libcurl4-gnutls-dev
  46     #     - libpq-dev
  47     #     - libxml2
  48     #     - libxml2-dev
  49     #     - make
  50     #     - python3-dev
  51     #     - ruby-dev
  52     #     - zlib1g-dev
  53
  54   # config:
  55   #   file: /etc/arvados/config.yml
  56   #   user: root
  57   ## IMPORTANT!!!!!
  58   ## If you're intalling any of the rails apps (api, workbench), the group
  59   ## should be set to that of the web server, usually `www-data`
  60   #   group: root
  61   #   mode: 640
  62
  63   ### ARVADOS CLUSTER CONFIG
  64   cluster:
  65     name: __CLUSTER__
  66     domain: __DOMAIN__
  67
  68     database:
  69       # max concurrent connections per arvados server daemon
  70       # connection_pool_max: 32
  71       name: __CLUSTER___arvados
  72       host: 127.0.0.1
  73       password: "__DATABASE_PASSWORD__"
  74       user: __CLUSTER___arvados
  75       extra_conn_params:
  76         client_encoding: UTF8
  77       # Centos7 does not enable SSL by default, so we disable
  78       # it here just for testing of the formula purposes only.
  79       # You should not do this in production, and should
  80       # configure Postgres certificates correctly
  81       {%- if grains.os_family in ('RedHat',) %}
  82         sslmode: disable
  83       {%- endif %}
  84
  85     tls:
  86       # certificate: ''
  87       # key: ''
  88       # When using arvados-snakeoil certs set insecure: true
  89       insecure: true
  90
  91     resources:
  92       virtual_machines:
  93         shell:
  94           name: shell
  95           backend: __SHELL_INT_IP__
  96           port: 4200
  97
  98     ### TOKENS
  99     tokens:
 100       system_root: __SYSTEM_ROOT_TOKEN__
 101       management: __MANAGEMENT_TOKEN__
 102       anonymous_user: __ANONYMOUS_USER_TOKEN__
 103
 104     ### KEYS
 105     secrets:
 106       blob_signing_key: __BLOB_SIGNING_KEY__
 107       workbench_secret_key: __WORKBENCH_SECRET_KEY__
 108
 109     Login:
 110       Test:
 111         Enable: true
 112         Users:
 113           __INITIAL_USER__:
 114             Email: __INITIAL_USER_EMAIL__
 115             Password: __INITIAL_USER_PASSWORD__
 116
 117     ### VOLUMES
 118     ## This should usually match all your `keepstore` instances
 119     Volumes:
 120       # the volume name will be composed with
 121       # <cluster>-nyw5e-<volume>
 122       __CLUSTER__-nyw5e-000000000000000:
 123         AccessViaHosts:
 124           'http://__KEEPSTORE0_INT_IP__:25107':
 125             ReadOnly: false
 126         Replication: 2
 127         Driver: Directory
 128         DriverParameters:
 129           Root: /tmp
 130       __CLUSTER__-nyw5e-000000000000001:
 131         AccessViaHosts:
 132           'http://__KEEPSTORE1_INT_IP__:25107':
 133             ReadOnly: false
 134         Replication: 2
 135         Driver: Directory
 136         DriverParameters:
 137           Root: /tmp
 138
 139     Users:
 140       NewUsersAreActive: true
 141       AutoAdminFirstUser: true
 142       AutoSetupNewUsers: true
 143       AutoSetupNewUsersWithRepository: true
 144
 145     Services:
 146       Controller:
 147         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__'
 148         InternalURLs:
 149           'http://localhost:8003': {}
 150       Keepbalance:
 151         InternalURLs:
 152           'http://__CONTROLLER_INT_IP__:9005': {}
 153       Keepproxy:
 154         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__KEEP_EXT_SSL_PORT__'
 155         InternalURLs:
 156           'http://__KEEP_INT_IP__:25100': {}
 157       Keepstore:
 158         InternalURLs:
 159           'http://__KEEPSTORE0_INT_IP__:25107': {}
 160           'http://__KEEPSTORE1_INT_IP__:25107': {}
 161       RailsAPI:
 162         InternalURLs:
 163           'http://localhost:8004': {}
 164       WebDAV:
 165         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__'
 166         InternalURLs:
 167           'http://localhost:9002': {}
 168       WebDAVDownload:
 169         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__KEEPWEB_EXT_SSL_PORT__'
 170       WebShell:
 171         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__WEBSHELL_EXT_SSL_PORT__'
 172       Websocket:
 173         ExternalURL: 'wss://__CLUSTER__.__DOMAIN__:__WEBSOCKET_EXT_SSL_PORT__/websocket'
 174         InternalURLs:
 175           'http://__WEBSOCKET_INT_IP__:8005': {}
 176       Workbench1:
 177         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__WORKBENCH1_EXT_SSL_PORT__'
 178       Workbench2:
 179         ExternalURL: 'https://__CLUSTER__.__DOMAIN__:__WORKBENCH2_EXT_SSL_PORT__'