forked from cloudfoundry/cf-deployment
-
Notifications
You must be signed in to change notification settings - Fork 0
/
bosh-lite.yml
129 lines (121 loc) · 3.76 KB
/
bosh-lite.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
---
# --- Set Router Static IP ---
- type: replace
path: /instance_groups/name=router/networks
value:
- name: default
static_ips: [10.244.0.34]
# --- Add Bosh Lite Security Groups ---
- type: replace
path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/default_running_security_groups
value:
- public_networks
- dns
- load_balancer
- type: replace
path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/security_group_definitions/-
value:
name: load_balancer
rules:
- destination: 10.244.0.34
protocol: all
# ----- Combine router VM extensions ----
- type: remove
path: /instance_groups/name=scheduler/vm_extensions
- type: replace
path: /instance_groups/name=router/vm_extensions
value:
- ssh-proxy-and-router-lb
- type: remove
path: /instance_groups/name=scheduler/jobs/name=ssh_proxy
- type: replace
path: /instance_groups/name=router/jobs/-
value:
name: ssh_proxy
release: diego
properties:
diego:
ssh_proxy:
bbs: &5
ca_cert: "((diego_bbs_client.ca))"
client_cert: "((diego_bbs_client.certificate))"
client_key: "((diego_bbs_client.private_key))"
disable_healthcheck_server: true
enable_cf_auth: true
host_key: "((diego_ssh_proxy_host_key.private_key))"
uaa_secret: "((uaa_clients_ssh-proxy_secret))"
uaa:
ca_cert: "((uaa_ssl.ca))"
backends:
tls:
enabled: true
ca_certificates:
- ((diego_instance_identity_ca.ca))
client_certificate: ((ssh_proxy_backends_tls.certificate))
client_private_key: ((ssh_proxy_backends_tls.private_key))
enable_consul_service_registration: false
logging:
format:
timestamp: "rfc3339"
loggregator: &diego_loggregator_client_properties
ca_cert: "((loggregator_tls_agent.ca))"
cert: "((loggregator_tls_agent.certificate))"
key: "((loggregator_tls_agent.private_key))"
use_v2_api: true
# ----- Scale Down ------
- type: replace
path: /instance_groups/name=nats/instances
value: 1
- type: replace
path: /instance_groups/name=diego-api/instances
value: 1
- type: replace
path: /instance_groups/name=uaa/instances
value: 1
- type: replace
path: /instance_groups/name=scheduler/instances
value: 1
- type: replace
path: /instance_groups/name=diego-cell/instances
value: 1
- type: replace
path: /instance_groups/name=diego-cell/jobs/name=rep/properties/diego/rep/evacuation_timeout_in_seconds?
value: 0
- type: replace
path: /instance_groups/name=router/instances
value: 1
- type: replace
path: /instance_groups/name=tcp-router/instances
value: 1
- type: replace
path: /instance_groups/name=api/instances
value: 1
- type: replace
path: /instance_groups/name=cc-worker/instances
value: 1
- type: replace
path: /instance_groups/name=doppler/instances
value: 1
- type: replace
path: /instance_groups/name=log-api/instances
value: 1
- type: replace
path: /instance_groups/name=credhub/instances
value: 1
# ----- Reduce default app memory to 256M ------
- type: replace
path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/default_app_memory?
value: 256
# ----- Disable kernel parameter tuning ------
- type: replace
path: /instance_groups/name=diego-cell/jobs/name=rep/properties?/set_kernel_parameters
value: false
- type: replace
path: /instance_groups/name=diego-api/jobs/name=bbs/properties?/set_kernel_parameters
value: false
- type: replace
path: /instance_groups/name=api/jobs/name=file_server/properties?/set_kernel_parameters
value: false
- type: replace
path: /instance_groups/name=diego-api/jobs/name=locket/properties?/set_kernel_parameters
value: false