cf_ngis_qe_v2.yml

---
name: cf_ngis_v2
director_uuid: 124da01f-5593-4eb6-a7bb-8e3d9bbef034

release:
  name: cf
  version: latest #130.65-dev

compilation: 
  workers: 3
  cloud_properties:
      cpu: 4
      disk: 8192
      ram: 4096
  network: default
  reuse_compilation_vms: true

networks:
  - name: default
    subnets:
    - reserved:
      - 10.8.0.2 - 10.8.5.140         #This_must_be_the_one_before_the_first_static
      - 10.8.5.184 - 10.8.5.241       #This_must_start_after_the_last_static_until_router
      - 10.8.5.243 - 10.8.13.100      #This_must_start_after_the_router
      - 10.8.14.0 - 10.8.14.100
      - 10.8.15.0 - 10.8.15.254
      static:
      - 10.8.5.141 - 10.8.5.150
      - 10.8.5.167 - 10.8.5.183
      - 10.8.5.242
      range: 10.8.0.0/20
      gateway: 10.8.0.1
      dns:
      - 10.8.0.13
      - 10.8.0.14 
      cloud_properties:
       name : Lab Network

update:
  canaries: 2
  canary_watch_time: 12000-240000
  update_watch_time: 12000-240000
  max_in_flight: 3
  max_errors: 1

resource_pools:
- name: infrastructure
  network: default
  size: 5
  stemcell:
    name: bosh-stemcell
    version: 0.6.7
  cloud_properties:
    ram: 2048
    disk: 32768
    cpu: 1
  env:
    bosh:
       #_password_generated_using_mkpasswd -m_sha-512
      password: $6$2f6qtRfO$oJOeKk/ZDNb7PWnvMiXDC/HstKiLiZCBHP32KHFVeM9rXgs4W/JJiI4a/eHoddhxJzorLYgi2JUQiOKxZko4M.

- name: small
  network: default
  stemcell:
    name: bosh-stemcell
    version: 0.6.7
  size: 6
  cloud_properties:
    cpu: 1
    ram: 1024
    disk: 4098

- name: medium
  network: default
  stemcell:
    name: bosh-stemcell
    version: 0.6.7
  size: 2
  cloud_properties:
    cpu: 2
    ram: 2048
    disk: 8192

- name: deas
  network: default
  size: 3
  stemcell:
    name: bosh-stemcell
    version: 0.6.7
  cloud_properties:
    cpu: 4
    ram: 8192
    disk: 26384
  env:
    bosh:
      password: $6$2f6qtRfO$oJOeKk/ZDNb7PWnvMiXDC/HstKiLiZCBHP32KHFVeM9rXgs4W/JJiI4a/eHoddhxJzorLYgi2JUQiOKxZko4M.

jobs:

- name: nfs_syslog_nats_redis
  release: cf
  template:
  - debian_nfs_server
  - syslog_aggregator
  - nats
  instances: 1
  resource_pool: infrastructure
  persistent_disk: 8192
  networks:
  - name: default
    static_ips:
    - 10.8.5.167  #136

- name: cc_hm
  release: cf
  template:
  - cloud_controller_ng
  - health_manager_next
  instances: 1
  resource_pool: infrastructure
  persistent_disk: 16384
  networks:
  - name: default
    static_ips:
    - 10.8.5.168  #137
  properties:
    ccdb: ccdb

- name: uaa
  release: cf
  template:
  - uaa
  instances: 1
  resource_pool: infrastructure
  persistent_disk: 2048
  networks:
  - name: default
    static_ips:
    - 10.8.5.169  #138

- name: router
  release: cf
  template: gorouter
  instances: 1
  resource_pool: infrastructure
  networks:
  - name: default
    static_ips: 10.8.5.242  #239

- name: dea_ng
  release: cf
  template: dea_next
  instances: 3
  resource_pool: deas
  networks:
  - name: default
    static_ips:
    - 10.8.5.172  #184
    - 10.8.5.173  #194
    - 10.8.5.174  #204


properties:

  domain: plengiscf-qe.dctmlabs.com
  system_domain: plengiscf-qe.dctmlabs.com
  system_domain_organization: "CFV2-Prod"
  app_domains:
    - plengiscf-qe.dctmlabs.com
    - plengiscf-dev.dctmlabs.com

  networks:
    apps: default
    management: default

  nats:
    user: nats
    password: z2b3ij3122
    address: 10.8.5.167  #136
    port: 4222

  ccdb:
    address: 10.8.5.168
    port: 5524
    pool_size: 10
    roles:
    - tag: admin
      name: ccadmin
      password: asdfasdf80456
    databases:
    - tag: cc
      name: appcloud
      citext: true

  ccdb_ng:
    address: 10.8.5.168
    port: 5524
    pool_size: 10
    roles:
    - tag: admin
      name: ccadmin
      password: asdfasdf80456
    databases:
    - tag: cc
      name: appcloud
      citext: true

  uaadb:
    db_scheme: mysql
    address: 10.8.5.169
    port: 3306
    roles:
    - tag: admin
      name: root
      password: asdfsadf9089089345
    databases:
    - tag: uaa
      name: uaa

  cc:
    srv_api_uri: http://ccng.plengiscf-qe.dctmlabs.com
    external_host: ccng
    logging_level: debug
    bulk_api_password: asdfjklhsadfhljkfas
    uaa_resource_id: cloud_controller
    staging_upload_user: jkfgjkfg
    staging_upload_password: lfgklfgfg

  ccng:
    srv_api_uri: http://ccng.plengiscf-qe.dctmlabs.com
    external_host: ccng
    logging_level: debug
    bulk_api_password: asdfjklhsadfhljkfas
    uaa_resource_id: cloud_controller
    staging_upload_user: jkfgjkfg
    staging_upload_password: lfgklfgfg

 
  router:
    port: 8081
    status:
      port: 8080
      user: 0dfg0dfg0dfg
      password: kdfgkdfgkdfgdfg4

  dea:
    max_memory: 8192

  dea_next:
    memory_mb: 8192
    memory_overcommit_factor: 4
    disk_mb: 16384
    disk_overcommit_factor: 4
    num_instances: 256


  nfs_server:
    address: 10.8.5.167  #136
    network: 10.8.0.0/20

 

  syslog_aggregator:
    address: 10.8.5.167  #136
    port: 54321


  uaa:
    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
    url: http://uaa.plengiscf-qe.dctmlabs.com
    resource_id: account_manager
    client_secret: somesecret
    token_secret: tokensecret
    cc:
      token_secret: asdfasdfasdfadfs
      client_secret: asdfasdfasdffth
    admin:
      client_secret: erthth45ydbgaerg
    login:
      client_secret: 457dgnsrgw457sdg
    batch:
      username: sdfgjwetrysdgf
      password: 235dshsbsdgssd
    client:
      override: true
      autoapprove:
        - vmc
        - my
        - portal
        - micro
        - support-signon
        - login
    clients:
      dashboard:
        secret: w4ydbsbJUetdrgdsg
        scope: openid,dashboard.user
        authorities: uaa.admin,uaa.resource,tokens.read,scim.read,scim.write
        authorized-grant-types: client_credentials,authorization_code,refresh_token
      portal:
        override: true
        id: portal
        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
        authorities: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write,password.write,uaa.admin
        secret: portalsecret
        authorized-grant-types: authorization_code,client_credentials,password,implicit
        access-token-validity: 1209600
        refresh-token-validity: 1209600
      support-services:
        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
        secret: ssosecretsso
        id: support-services
        authorized-grant-types: authorization_code,client_credentials
        redirect-uri: http://support-signon.plengiscf-qe.dctmlabs.com
        authorities: portal.users.read
        access-token-validity: 1209600
        refresh-token-validity: 1209600
      vmc:
        override: true
        authorized-grant-types: implicit
        authorities: uaa.none
        redirect-uri: http://uaa.cloudfoundry.com/redirect/vmc,https://uaa.cloudfoundry.com/redirect/vmc
        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
    scim:
      users:
      - your-admin@your-org.com|your-admin-password|scim.write,scim.read,openid,cloud_controller.admin
      - dash-user|dash-password|openid,dashboard.user