X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/4090574822afd6a7b48ccd277ba84c3cc6244e71..HEAD:/tools/salt-install/local.params.example.single_host_multiple_hostnames diff --git a/tools/salt-install/local.params.example.single_host_multiple_hostnames b/tools/salt-install/local.params.example.single_host_multiple_hostnames index 20f334166e..8dece2b76f 100644 --- a/tools/salt-install/local.params.example.single_host_multiple_hostnames +++ b/tools/salt-install/local.params.example.single_host_multiple_hostnames @@ -13,37 +13,13 @@ DOMAIN="domain_fixme_or_this_wont_work" # For multi-node installs, the ssh log in for each node # must be root or able to sudo -DEPLOY_USER=root +DEPLOY_USER=admin -# The mapping of nodes to roles -# installer.sh will log in to each of these nodes and then provision -# it for the specified roles. -NODES=( - [localhost]=api,controller,websocket,dispatcher,keepbalance,keepstore,keepproxy,keepweb,workbench,workbench2,webshell -) +INITIAL_USER=admin -# External ports used by the Arvados services -CONTROLLER_EXT_SSL_PORT=443 -KEEP_EXT_SSL_PORT=25101 -KEEPWEB_EXT_SSL_PORT=9002 -WEBSHELL_EXT_SSL_PORT=4202 -WEBSOCKET_EXT_SSL_PORT=8002 -WORKBENCH1_EXT_SSL_PORT=443 -WORKBENCH2_EXT_SSL_PORT=3001 - -INITIAL_USER="admin" # If not specified, the initial user email will be composed as # INITIAL_USER@CLUSTER.DOMAIN INITIAL_USER_EMAIL="admin@cluster_fixme_or_this_wont_work.domain_fixme_or_this_wont_work" -INITIAL_USER_PASSWORD="password" - -# YOU SHOULD CHANGE THESE TO SOME RANDOM STRINGS -BLOB_SIGNING_KEY=blobsigningkeymushaveatleast32characters -MANAGEMENT_TOKEN=managementtokenmushaveatleast32characters -SYSTEM_ROOT_TOKEN=systemroottokenmushaveatleast32characters -ANONYMOUS_USER_TOKEN=anonymoususertokenmushaveatleast32characters -WORKBENCH_SECRET_KEY=workbenchsecretkeymushaveatleast32characters -DATABASE_PASSWORD=please_set_this_to_some_secure_value # SSL CERTIFICATES # Arvados requires SSL certificates to work correctly. This installer supports these options: @@ -58,6 +34,54 @@ SSL_MODE="self-signed" # See https://doc.arvados.org/intall/salt-single-host.html#bring-your-own for more information. # CUSTOM_CERTS_DIR="${SCRIPT_DIR}/local_config_dir/certs" +# Set the following to "yes" if the key files are encrypted and optionally set +# a custom AWS secret name for each node to retrieve the password. +SSL_KEY_ENCRYPTED="no" +SSL_KEY_AWS_SECRET_NAME="${CLUSTER}-arvados-ssl-privkey-password" + +# Customize Prometheus & Grafana web UI access credentials +MONITORING_USERNAME=${INITIAL_USER} +MONITORING_PASSWORD=${INITIAL_USER_PASSWORD} +MONITORING_EMAIL=${INITIAL_USER_EMAIL} +# Sets the directory for Grafana dashboards +# GRAFANA_DASHBOARDS_DIR="${SCRIPT_DIR}/local_config_dir/dashboards" + +# The mapping of nodes to roles +# installer.sh will log in to each of these nodes and then provision +# it for the specified roles. +NODES=( + [localhost]='' +) + +# External ports used by the Arvados services +CONTROLLER_EXT_SSL_PORT=443 +KEEP_EXT_SSL_PORT=25101 +KEEPWEB_EXT_SSL_PORT=9002 +WEBSHELL_EXT_SSL_PORT=4202 +WEBSOCKET_EXT_SSL_PORT=8002 +WORKBENCH1_EXT_SSL_PORT=443 +WORKBENCH2_EXT_SSL_PORT=3001 + +CLUSTER_INT_CIDR="" +CONTROLLER_INT_IP="" +DATABASE_INT_IP="" +WORKBENCH1_INT_IP="" +DISPATCHER_INT_IP="" +KEEPBALANCE_INT_IP="" +WEBSOCKET_INT_IP="" +KEEPWEB_INT_IP="" +WORKBENCH2_INT_IP="" +WEBSHELL_INT_IP="" +KEEP_INT_IP="" +KEEPSTORE0_INT_IP="" +SHELL_INT_IP="" + +DATABASE_NAME="${CLUSTER}_arvados" +DATABASE_USER="${CLUSTER}_arvados" +# Set these if using an external PostgreSQL service. +#DATABASE_EXTERNAL_SERVICE_HOST_OR_IP= +#DATABASE_POSTGRESQL_VERSION= + # The directory to check for the config files (pillars, states) you want to use. # There are a few examples under 'config_examples'. # CONFIG_DIR="local_config_dir" @@ -86,3 +110,5 @@ RELEASE="production" # DOCKER_TAG="v2.4.2" # LOCALE_TAG="v0.3.4" # LETSENCRYPT_TAG="v2.1.0" +# PROMETHEUS_TAG="v5.6.5" +# GRAFANA_TAG="v3.1.3"