templates/v134/openstack/medium/deployment_file.yml.erb in bosh-cloudfoundry-0.7.0.alpha.10 vs templates/v134/openstack/medium/deployment_file.yml.erb in bosh-cloudfoundry-0.7.0.alpha.11
- old
+ new
@@ -66,11 +66,11 @@
instance_type: m1.medium
resource_pools:
- name: small
network: default
- size: 5
+ size: 4
stemcell:
name: bosh-stemcell
version: latest
cloud_properties:
instance_type: m1.small
@@ -102,34 +102,21 @@
db: databases
- name: core
release: cf-release
template:
- - syslog_aggregator
- nats
- health_manager_next
- - collector
- - login
+ - uaa
instances: 1
resource_pool: small
networks:
- name: default
default:
- dns
- gateway
- # need a separate job for uaa due to https://github.com/cloudfoundry/cf-release/issues/104
- - name: uaa
- release: cf-release
- template:
- - uaa
- instances: 1
- resource_pool: small
- networks:
- - name: default
- default: [dns, gateway]
-
- name: api
release: cf-release
template:
- cloud_controller_ng
- gorouter
@@ -199,30 +186,10 @@
disk_mb: 4096
disk_overcommit_factor: 4
dea_next: *dea
- service_lifecycle:
- serialization_data_server:
- - 0.core.default.<%= name %>.microbosh
-
- syslog_aggregator:
- address: 0.core.default.<%= name %>.microbosh
- port: 54321
-
- serialization_data_server:
- port: 8080
- logging_level: debug
- upload_token: <%= common_password %>
- upload_timeout: 10
-
- collector:
- deployment_name: cf
- use_tsdb: false
- use_aws_cloudwatch: false
- use_datadog: false
-
nfs_server:
address: 0.data.default.<%= name %>.microbosh
#network: "*.<%= name %>.microbosh"
#idmapd_domain: <%= dns %>
@@ -301,15 +268,11 @@
droplet_directory_key: cc-droplets
ccng: *cc
login:
- protocol: <%= protocol %>
- links:
- home: <%= protocol %>://console.<%= dns %>
- passwd: <%= protocol %>://console.<%= dns %>/password_resets/new
- signup: <%= protocol %>://console.<%= dns %>/register
+ enabled: false
uaa:
url: <%= protocol %>://uaa.<%= dns %>
spring_profiles: postgresql
no_ssl: <%= no_ssl %>
@@ -347,52 +310,17 @@
username: batchuser
password: <%= common_password %>
client:
autoapprove:
- cf
- - my
- - micro
- - support-signon
- - login
clients:
- login:
- override: true
- scope: openid
- authorities: oauth.login
- secret: <%= common_password %>
- authorized-grant-types: authorization_code,client_credentials,refresh_token
- redirect-uri: <%= protocol %>://login.<%= dns %>
- support-services:
- scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
- secret: <%= common_password %>
- authorized-grant-types: authorization_code,client_credentials
- redirect-uri: <%= protocol %>://support-signon.<%= dns %>
- authorities: portal.users.read
- access-token-validity: 1209600
- refresh-token-validity: 1209600
- oauth2service:
- secret: <%= common_password %>
- scope: openid,cloud_controller.read,cloud_controller.write
- authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
- authorized-grant-types: client_credentials,implicit
- redirect-uri: <%= protocol %>://rewritten-later.cloudfoundry.com/whatever
- override: true
- autoapprove: true
cf:
override: true
authorized-grant-types: password,implicit,refresh_token
authorities: uaa.none
scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
access-token-validity: 7200
refresh-token-validity: 1209600
- servicesmgmt:
- override: true
- secret: <%= common_password %>
- scope: openid,cloud_controller.read,cloud_controller.write
- authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
- authorized-grant-types: authorization_code,client_credentials,password,implicit
- redirect-uri: <%= protocol %>://servicesmgmt.mycloud.com/auth/cloudfoundry/callback
- autoapprove: true
scim:
users:
- admin|<%= common_password %>|scim.write,scim.read,openid,cloud_controller.admin
- services|<%= common_password %>|scim.write,scim.read,openid,cloud_controller.admin