blob: e8737e7e3779fc2f73d2e0f676f97f74315feff0 [file] [log] [blame]
Richard Felkl344c1322018-02-19 11:55:04 +01001classes:
azvyagintsev8783aae2018-10-23 15:52:44 +03002- service.docker.host
azvyagintsev6efdf702018-02-27 11:31:40 +02003- system.aptly.server.docker
4- system.aptly.client.publisher
azvyagintsevb0a6ff52018-08-20 14:39:41 +03005- system.aptly.server.mirror.ubuntu.xenial.mcp.apt_mk.salt
azvyagintsevbab77b52018-10-16 21:09:58 +03006- system.aptly.server.mirror.ubuntu.xenial.mcp.apt_mk.aptly
azvyagintsev78456392018-10-26 13:46:56 +03007- system.debmirror.mirror_mirantis_com
Richard Felkl344c1322018-02-19 11:55:04 +01008- system.git.server.single
Richard Felkl344c1322018-02-19 11:55:04 +01009- system.docker.client
azvyagintsev6efdf702018-02-27 11:31:40 +020010- system.docker.swarm.stack.aptly
azvyagintsev6efdf702018-02-27 11:31:40 +020011- system.docker.swarm.manager
12- system.docker.swarm.master
Richard Felkl344c1322018-02-19 11:55:04 +010013parameters:
14 _param:
Richard Felkl344c1322018-02-19 11:55:04 +010015 aptly_gpg_keypair_id: A8272E04
16 aptly_gpg_passphrase: ""
17 aptly_server_secure: true
azvyagintsev6efdf702018-02-27 11:31:40 +020018 docker_stack_aptly_public_replicas: 1
19 docker_registry_http_secret: 'Thoh0unuaeSeeT9i'
azvyagintsev21103382018-04-07 17:48:38 +030020 # Upstream mirrors:
azvyagintsev5e648a32018-08-23 12:50:20 +030021 #mcp_docker_registry: 'docker-prod-local.artifactory.mirantis.com'
azvyagintsev72104362018-08-21 21:53:56 +030022 #vcp_images_mirror: 'http://images.mirantis.com'
23 vcp_images_mirror: 'https://apt.mcp.mirantis.net/images'
azvyagintsev5e648a32018-08-23 12:50:20 +030024 mcp_docker_registry: 'docker-prod-local.docker.mirantis.net'
azvyagintsev913cfa92018-12-27 16:36:05 +020025 local_docker_client_registry_target_registry: apt:5000
azvyagintsev21103382018-04-07 17:48:38 +030026 docker_image_aptly:
azvyagintsev5e648a32018-08-23 12:50:20 +030027 base: ${_param:mcp_docker_registry}/mirantis/cicd/aptly:${_param:apt_mk_version}
28 public: ${_param:mcp_docker_registry}/mirantis/cicd/aptly-public:${_param:apt_mk_version}
29 publisher: ${_param:mcp_docker_registry}/mirantis/cicd/aptly-publisher:${_param:apt_mk_version}
Richard Felkl344c1322018-02-19 11:55:04 +010030 aptly_gpg_private_key: |
31 -----BEGIN PGP PRIVATE KEY BLOCK-----
32 Version: GnuPG v1
33
34 lQOYBFnU98YBCACdTxOkxAJJQaQ4B9sEsh9s4MMOMxPSCwvzgGbk6HECDBhz2auF
35 FfVydNbjLfoih8qdaLSmBQg8+FtdYJHEG1lekeiUETOxJnkhUFXq85KGNj9BbGBr
36 m3/6Jo58pdMNdUMurAs807STvH3iTAhYymggX1u9GyjKbv24p2KMGuK1gC3W04NG
37 qOQX3iwjmBWq87fX7tNLafptCq5A9TAv4Dvt1XZgGCiLI+EcPyfgNB1W/+EOOkFu
38 jFdM43nm0YE3Bf4uuVR/u0REprYJfChdS6qYYgI3n2LuPyi9WMVVee+1RZmTwFcB
39 cS53h+gq1GHOhj+YOwm3+ctmIoTNi26siutdABEBAAEAB/wP10AzpddTGCyYxdW8
40 zdETTjjmK6eRzbH45dO2tl925M/rjp5SiwkJ6xEelGktY/43xqz2UOho91t/9jMH
41 i/d+afQBQRAzBRxKigP04m09XaYWCPtWqrSC9LIBhFNR9h57SzDggbMb8227xYtL
42 oapFpEShMOR1KiMbnqNyV1zACQ1pHOZZOWzat8nFuKDeqA3n3Y/Cm8OCrX4QSGIU
43 FEqdQs7jgNhhxKEsmFUJfxF8KtTAyrdB0PVC6iyY3wifbpNZUk2IBfTa738LHcOo
44 Fc+griAsOPFCS1hLejZQphUX8NmyvE3nbzhsB8rNJqyKFgtFlIj7VpPMiYzK7P0h
45 1NdjBADF/vZSnwMX2FQ2BKiWd35wHGLtwKGIKCWUTfnoRaRrMnl80vhX2IBwIsvO
46 cp7APojM8RfWwhMl/yvQ0QcuDNev47+s/9ix8SPJnnd2WvXACIq6JMtrhceVnLZO
47 4KEp97S5+J/klbobB+GCNTFV+YG6uPLJ1oEorDhQbufgADqhswQAy2S4iMNuPxA/
48 VAh1yYNewn0/64JiREjt1t6AiGMDj6iCi+Wdz+/eipZIF6o1m/diO0mq4YIWCk3p
49 88tibIQSJvaFjyBTB+fGk1SfxTxeMJlasO5XPDuyzgnJW8sLP9B1jzBzr8dQmJ1b
50 TkepOdjps2CoNzJPGtFyhagi9qirFq8EAJjNe79JwozC3l8IStJOBiVUWa4cD+87
51 XeZMAPn+4iRzS8vcGiXMSvz6fYVXlYe/kF9APjGQe+PDSMgSd3Sz5cqyDBANi2Sp
52 m5dNn4njwrNjMGghMCZ9y8iVPTy+RYgcpHJKLHwPoNtTpt845JmOU0z7f43Py71F
53 3h5lsrjCilnKSO60Kk1pcmFudGlzIE9mZmxpbmUgQXB0bHkgPGluZm9AbWlyYW50
54 aXMuY29tPokBOAQTAQIAIgUCWdT3xgIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgEC
55 F4AACgkQpIXB3agnLgS9wQf7B2LiR4wQh7VqVwx1dKrhj0AXF7jSYfYJ/vtV6mXb
56 0AxAxC3BVoW+KLPB+W9lHCXBRYXf1pJZIYcxv0rTGeqzpcxVmMIT1E4OAmZp8pFl
57 BsFNTERG2z01kdnd3oddF3GSiP1cTg2+c9hJUGJR0tAbPXDm0dXhuDD428IuSx5o
58 4bdNdCshPYRe/P3CGG+KrySLL0/06UU2I5Mxf4pctRouWfrQDA6sIS+P58NKwIpX
59 dWj1pPogJzVUJqHHyAUM8Ri+AZoXtKjqXAqNQNCd/xPaL9dtGxKTMDDKHvqyF5Mp
60 U3eYcEFIi79nunfC6Iaw+Izo+hYpiBlb2s6QkCgR2y/f150DmARZ1PfGAQgA1NqQ
61 orh2cvogoU4DbRwnQKZDCCt4WnbvcJf8WZw7sINbqJm3pd/UjVwcPG0GFe9w7/eE
62 dKv6N/fVMJYo/Dj34j2waN46sIBBaXi8pPuCrs/fV+KFGmdXNrOED8LeJ835+6eA
63 m3W/930P1o/Rncfi7ANQr4nuSkzCoXhwo9n8RX70L1pYtGw1v3qMaDBKHGpZ0ZqS
64 ewSlQYclWG5EKg6ecR0wnLK9W62b5uExbexh7d+W22NTZ9j7SVfwHG4IleZ03B+a
65 k0NqlKpdEA9+8QLdrQsqFN8qDHqJ46ag+5xtpAPmw1S2va7Gkr0BMxzdxwA5d4Za
66 uevaEKTi5NLGdNZuHQARAQABAAf7BFUmmIlUr+Zzf5UM8M2f5ur7dlEcNAszuID/
67 e/t4I5Go7fejC1dRBkeXs4sskom7LMdHBPDzOOxshH6p+uhV8176FkhfvXP+4Ny6
68 SklsUY6dpzZPK0hrOAvTZla7GuhQbFTugzuUWr9K8T0gMSv+bHtsywXtuclyNMM0
69 18D6J5fycwEoO4mlRg7TS1xBqzumZiIZCQp6y1KUwtDKOcvg/Xf15kHsiXJ/nNAA
70 z8Nkghk9mEF/ve7zsUPKgwcs69wdLeVOUtSqe990gLmKbRKm8LqbHVsgZXkUNUpC
71 0vQrhM74WGrkIlo+Qf/SLKs6J1I09FQ6mRIsmI1LySZlaQwwQQQA4/nfrkkZB4kW
72 9PaADnJz/c6rIIAIrIiO/CflyjRmz4+RTeJ3bNHlf+EmecTVmPaFUoweeWCaLzr5
73 ZgWnBCe/gW7Cp/tmZZw+jVhTMhP73utFusvVTBQA4fOU24XPOkoh9Lm2jmAvmG6n
74 JbKqJWtTG3Ek0Pl2lGECxLT4Wzleh2UEAO8Ez6I51kmFDPmpz4H/rqhuTmfIaif4
75 CKYLAY9XH2fDCwwjC5Hn//ErCFGcxJkWfUCRdTZATK+c3HipEXxdEN/Z4z0GmBDD
76 2eRoqagXiwXIxFA0REDgx6FXm4laXEUzyrIPIzuzZbtV9x6S/FlzyXdZcLZoavkr
77 PX7SK0t7pCxZA/0UcBegcuKSlHtLkBAD/1cdj2OlgteGqbpRP3d4FLADrsBw+iCN
78 h8lVfNtjKvcpY46ihqHZjZMcfaeI9p49N7HqwuuRaqKi7mE8QOuBM1oTAJ72CwV/
79 bx+zDYDiL+2EQbZh58yPjwnLn7PcTNpMZ7RT58iGw6xXaJTkJTqiFthcG0B/iQEf
80 BBgBAgAJBQJZ1PfGAhsMAAoJEKSFwd2oJy4E5R4H/3XjYvsalh2g4iYEOjZ1Ld55
81 AA+NDlnpeXJfEOlhxdnAvkTc1CfKdT3qaN5hG0m7sVowaeVbf4cDNwIQy+R75V73
82 h2DQpno3746DDC0C2jRzDBwKrUU9Y/du3REcq4kMCnhtVBMSX6rbJoxSFdCzLu/X
83 Jd9oeXbbkObIeoe9FWIrswFB4NUhTHLn1bk5p8zsVbsRm3jl6ofoQmFKFoK6Fauu
84 NeB+Fc/1UdMpUb1Y9dpE/akgRm/79NRHKA4plQ2X/CGZu+KIw4XVn/0ilU8FbsX+
85 KXcp8ui0XRqg8z44wtlroFTrnR+DgqplsellsrM+xGtZb9VrjFLeP89jzhrBWgE=
86 =QgPA
87 -----END PGP PRIVATE KEY BLOCK-----
88 aptly_gpg_public_key: |
89 -----BEGIN PGP PUBLIC KEY BLOCK-----
90 Version: GnuPG v1
91
92 mQENBFnU98YBCACdTxOkxAJJQaQ4B9sEsh9s4MMOMxPSCwvzgGbk6HECDBhz2auF
93 FfVydNbjLfoih8qdaLSmBQg8+FtdYJHEG1lekeiUETOxJnkhUFXq85KGNj9BbGBr
94 m3/6Jo58pdMNdUMurAs807STvH3iTAhYymggX1u9GyjKbv24p2KMGuK1gC3W04NG
95 qOQX3iwjmBWq87fX7tNLafptCq5A9TAv4Dvt1XZgGCiLI+EcPyfgNB1W/+EOOkFu
96 jFdM43nm0YE3Bf4uuVR/u0REprYJfChdS6qYYgI3n2LuPyi9WMVVee+1RZmTwFcB
97 cS53h+gq1GHOhj+YOwm3+ctmIoTNi26siutdABEBAAG0Kk1pcmFudGlzIE9mZmxp
98 bmUgQXB0bHkgPGluZm9AbWlyYW50aXMuY29tPokBOAQTAQIAIgUCWdT3xgIbAwYL
99 CQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQpIXB3agnLgS9wQf7B2LiR4wQh7Vq
100 Vwx1dKrhj0AXF7jSYfYJ/vtV6mXb0AxAxC3BVoW+KLPB+W9lHCXBRYXf1pJZIYcx
101 v0rTGeqzpcxVmMIT1E4OAmZp8pFlBsFNTERG2z01kdnd3oddF3GSiP1cTg2+c9hJ
102 UGJR0tAbPXDm0dXhuDD428IuSx5o4bdNdCshPYRe/P3CGG+KrySLL0/06UU2I5Mx
103 f4pctRouWfrQDA6sIS+P58NKwIpXdWj1pPogJzVUJqHHyAUM8Ri+AZoXtKjqXAqN
104 QNCd/xPaL9dtGxKTMDDKHvqyF5MpU3eYcEFIi79nunfC6Iaw+Izo+hYpiBlb2s6Q
105 kCgR2y/f17kBDQRZ1PfGAQgA1NqQorh2cvogoU4DbRwnQKZDCCt4WnbvcJf8WZw7
106 sINbqJm3pd/UjVwcPG0GFe9w7/eEdKv6N/fVMJYo/Dj34j2waN46sIBBaXi8pPuC
107 rs/fV+KFGmdXNrOED8LeJ835+6eAm3W/930P1o/Rncfi7ANQr4nuSkzCoXhwo9n8
108 RX70L1pYtGw1v3qMaDBKHGpZ0ZqSewSlQYclWG5EKg6ecR0wnLK9W62b5uExbexh
109 7d+W22NTZ9j7SVfwHG4IleZ03B+ak0NqlKpdEA9+8QLdrQsqFN8qDHqJ46ag+5xt
110 pAPmw1S2va7Gkr0BMxzdxwA5d4ZauevaEKTi5NLGdNZuHQARAQABiQEfBBgBAgAJ
111 BQJZ1PfGAhsMAAoJEKSFwd2oJy4E5R4H/3XjYvsalh2g4iYEOjZ1Ld55AA+NDlnp
112 eXJfEOlhxdnAvkTc1CfKdT3qaN5hG0m7sVowaeVbf4cDNwIQy+R75V73h2DQpno3
113 746DDC0C2jRzDBwKrUU9Y/du3REcq4kMCnhtVBMSX6rbJoxSFdCzLu/XJd9oeXbb
114 kObIeoe9FWIrswFB4NUhTHLn1bk5p8zsVbsRm3jl6ofoQmFKFoK6FauuNeB+Fc/1
115 UdMpUb1Y9dpE/akgRm/79NRHKA4plQ2X/CGZu+KIw4XVn/0ilU8FbsX+KXcp8ui0
116 XRqg8z44wtlroFTrnR+DgqplsellsrM+xGtZb9VrjFLeP89jzhrBWgE=
117 =GLje
118 -----END PGP PUBLIC KEY BLOCK-----
119 aptly:
120 server:
Alexander Noskovf1e79842018-11-07 13:57:29 +0400121 mirror_update:
122 enabled: False
Richard Felkl3d996d22018-04-02 23:29:44 +0200123 repo:
124 mcp_xenial_updates:
Richard Felklec90b722018-04-03 16:15:10 +0200125 distribution: ubuntu-xenial
Richard Felkl3d996d22018-04-02 23:29:44 +0200126 component: updates
Richard Felkl3a8b1bd2018-04-03 15:09:49 +0200127 architectures: amd64
azvyagintsev913cfa92018-12-27 16:36:05 +0200128 # Dummy repo
Richard Felkl3a8b1bd2018-04-03 15:09:49 +0200129 comment: "Local Xenial updates repository."
Richard Felklec90b722018-04-03 16:15:10 +0200130 publisher:
131 component: updates
132 distributions:
133 - ubuntu-xenial/${_param:apt_mk_version}
134 - ubuntu-xenial/stable
Richard Felkl344c1322018-02-19 11:55:04 +0100135 docker:
136 host:
azvyagintsev8783aae2018-10-23 15:52:44 +0300137 pkgs:
138 - docker-ce
139 - python-docker
Richard Felkl344c1322018-02-19 11:55:04 +0100140 insecure_registries:
141 - apt:5000
142 options:
143 bip: 10.99.0.1/16
144 fixed-cidr: 10.99.0.1/17
azvyagintsev65775c92018-07-25 12:31:08 +0200145 storage-driver: overlay2
Richard Felkl344c1322018-02-19 11:55:04 +0100146 client:
147 registry:
azvyagintsev913cfa92018-12-27 16:36:05 +0200148 target_registry: ${_param:local_docker_client_registry_target_registry}
149 # List of images now at reclass-system/defaults
150 image: ${_param:local_registry_mirror_image_list}
Richard Felkl344c1322018-02-19 11:55:04 +0100151 git:
152 server:
153 directory: /srv/git/
154 repos:
Richard Felkl344c1322018-02-19 11:55:04 +0100155 - name: mk-pipelines
Richard Felklda892422018-03-07 09:31:25 +0100156 url: https://github.com/Mirantis/mk-pipelines.git
Richard Felkl344c1322018-02-19 11:55:04 +0100157 - name: pipeline-library
Richard Felklda892422018-03-07 09:31:25 +0100158 url: https://github.com/Mirantis/pipeline-library.git
Oleksii Zhurbaf44db0f2018-06-22 14:18:24 -0500159 - name: cvp-sanity-checks
160 url: https://github.com/Mirantis/cvp-sanity-checks.git
161 - name: cvp-spt
162 url: https://github.com/Mirantis/cvp-spt.git
163 - name: stacklight-pytest
164 url: https://github.com/Mirantis/stacklight-pytest
165 - name: cvp-configuration
166 url: https://github.com/Mirantis/cvp-configuration.git
Richard Felkl344c1322018-02-19 11:55:04 +0100167 - name: rundeck-cis-jobs
168 url: https://github.com/Mirantis/rundeck-cis-jobs.git
169 nginx:
170 server:
171 site:
Richard Felkl344c1322018-02-19 11:55:04 +0100172 http_server:
173 enabled: true
174 type: nginx_static
175 name: http_server
176 root: /srv/http
177 autoindex: True
178 access_policy:
179 allow:
180 - all
181 host:
azvyagintsev913cfa92018-12-27 16:36:05 +0200182 name: http.${_param:cluster_domain}
Richard Felkl344c1322018-02-19 11:55:04 +0100183 port: 8078
azvyagintsev6efdf702018-02-27 11:31:40 +0200184 aptly_public:
185 enabled: true
186 type: nginx_proxy
187 name: aptly_public
188 proxy:
189 host: 127.0.0.1
190 port: 18085
191 protocol: http
192 size: 1G
193 host:
azvyagintsev913cfa92018-12-27 16:36:05 +0200194 name: aptly.${_param:cluster_domain}
azvyagintsev6efdf702018-02-27 11:31:40 +0200195 port: 80
196 aptly_api:
197 enabled: true
198 type: nginx_proxy
199 name: aptly_api
200 proxy:
201 host: 127.0.0.1
202 port: 18084
203 protocol: http
204 size: 1G
205 host:
azvyagintsev913cfa92018-12-27 16:36:05 +0200206 name: aptly-api.${_param:cluster_domain}
azvyagintsev6efdf702018-02-27 11:31:40 +0200207 port: 8080
208 docker_registry:
209 enabled: true
210 type: nginx_proxy
211 name: docker_registry
212 proxy:
213 host: 127.0.0.1
214 port: 15000
215 protocol: http
216 size: 1G
217 host:
azvyagintsev913cfa92018-12-27 16:36:05 +0200218 name: registry.${_param:cluster_domain}
azvyagintsev6efdf702018-02-27 11:31:40 +0200219 port: 5000
Richard Felkl344c1322018-02-19 11:55:04 +0100220 linux:
221 system:
222 file:
Richard Felkl728360e2018-03-06 16:14:21 +0100223 ubuntu-16-04-x64.qcow2:
224 name: /srv/http/images/ubuntu-16-04-x64-mcp${_param:apt_mk_version}.qcow2
azvyagintsev21103382018-04-07 17:48:38 +0300225 source: ${_param:vcp_images_mirror}/ubuntu-16-04-x64-mcp${_param:apt_mk_version}.qcow2
azvyagintsev72104362018-08-21 21:53:56 +0300226 hash: ${_param:vcp_images_mirror}/ubuntu-16-04-x64-mcp${_param:apt_mk_version}.qcow2.md5
Richard Felkl728360e2018-03-06 16:14:21 +0100227 ubuntu-16-04-x64.qcow2.md5:
228 name: /srv/http/images/ubuntu-16-04-x64-mcp${_param:apt_mk_version}.qcow2.md5
azvyagintsev21103382018-04-07 17:48:38 +0300229 source: ${_param:vcp_images_mirror}/ubuntu-16-04-x64-mcp${_param:apt_mk_version}.qcow2.md5
Richard Felkl344c1322018-02-19 11:55:04 +0100230 profile:
231 locales: |
232 export LC_ALL=C
233 directory:
234 /srv/http/images:
235 user: root
236 group: root
237 mode: 755
238 makedirs: true
239 /srv/scripts/:
240 user: root
241 group: root
242 mode: 755
243 makedirs: true
Jiri Broulikfa26d672018-04-12 09:54:50 +0200244 maas:
245 mirror:
246 enabled: true
247 image:
azvyagintsev100ad072018-06-01 15:04:19 +0300248 sections:
249 bootloaders:
250 keyring: /usr/share/keyrings/ubuntu-cloudimage-keyring.gpg
251 upstream: http://mirror.mirantis.com/${_param:apt_mk_version}/maas-ephemeral-v3/
252 local_dir: /srv/http/${_param:apt_mk_version}/maas-ephemeral-v3/
253 count: 1
254 # i386 need for pxe
255 filters: ['arch~(i386|amd64)', 'os~(grub*|pxelinux*)']
Jiri Broulikfa26d672018-04-12 09:54:50 +0200256 xenial:
257 keyring: /usr/share/keyrings/ubuntu-cloudimage-keyring.gpg
azvyagintsev7f978ac2018-06-01 11:40:50 +0300258 upstream: http://mirror.mirantis.com/${_param:apt_mk_version}/maas-ephemeral-v3/
azvyagintsev100ad072018-06-01 15:04:19 +0300259 local_dir: /srv/http/${_param:apt_mk_version}/maas-ephemeral-v3/
azvyagintsev7f978ac2018-06-01 11:40:50 +0300260 count: 1
azvyagintsev100ad072018-06-01 15:04:19 +0300261 filters: ['release~(xenial)', 'arch~(amd64)', 'subarch~(generic|hwe-16*|ga-16*)']