Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / ec5188e0f1963ef36cad8a159fc8c1129fa2a438 / . / docker / swarm / stack / kqueen.yml
blob: 430a344cc1d705617cc0260dc1d72550f2f1c291 [file] [log] [blame]
Vnaumov1acc3692018-03-15 19:27:56 +0400[diff] [blame]1parameters:
2 _param:
3 docker_kqueen_api_replicas: 1
4 docker_image_kqueen_api: kqueen/api:v0.18
5 docker_image_kqueen_ui: kqueen/ui:v0.8
6 kqueen_api_bind_host: kqueen-api
7 kqueen_api_bind_port: ${_param:haproxy_kqueen_api_bind_port}
8 kqueen_api_db_host: etcd
9 kqueen_api_debug: True
10 kqueen_api_prometheus_whitelist: '172.16.10.0/24' ##REcheck with network
vnaumov61c1a482018-04-04 11:14:08 +0400[diff] [blame]11 kqueen_api_ldap_uri: 'ldap://ldap'
vnaumov02ea5042018-04-11 13:20:26 +0400[diff] [blame]12 kqueen_api_ldap_dn: 'cn=admin,dc=example,dc=org'
13 kqueen_api_ldap_password: 'password'
vnaumov61c1a482018-04-04 11:14:08 +0400[diff] [blame]14 kqueen_api_auth_modules: 'local'
Vnaumov1acc3692018-03-15 19:27:56 +0400[diff] [blame]15 docker_kqueen_ui_replicas: 1
16 kqueen_ui_bind_port: ${_param:haproxy_kqueen_ui_bind_port}
17 kqueen_ui_bind_host: kqueen-ui
18 kqueen_ui_mail_host: mail
19 kqueen_ui_mail_port: 10025
20 kqueen_ui_debug: True
21 kqueen_ui_enable_public_registration: False
vnaumov61c1a482018-04-04 11:14:08 +0400[diff] [blame]22 kqueen_ui_ldap_auth_notify: False
23 kqueen_ui_local_auth_notify: True
Vnaumov1acc3692018-03-15 19:27:56 +0400[diff] [blame]24 kqueen_credentials:
25 kqueen_api_secret_key: 'pasteyoursecret'
26 kqueen_ui_secret_key: 'pasteyoursecret'
27 kqueen_api_bootstrap_admin: True
28 kqueen_api_admin_username: admin
29 kqueen_api_admin_password: default
30 kqueen_api_admin_organization: MirantisCloudPlatform
31 kqueen_api_admin_namespace: mcp
32 docker:
33 client:
34 stack:
35 kqueen:
36 service:
37 kqueen-api:
38 image: ${_param:docker_image_kqueen_api}
39 environment:
40 KQUEEN_DEBUG: ${_param:kqueen_api_debug}
41 KQUEEN_CONFIG_FILE: config/prod.py
vnaumov61c1a482018-04-04 11:14:08 +0400[diff] [blame]42 KQUEEN_LDAP_URI: ${_param:kqueen_api_ldap_uri}
vnaumov02ea5042018-04-11 13:20:26 +0400[diff] [blame]43 KQUEEN_LDAP_DN: ${_param:kqueen_api_ldap_dn}
44 KQUEEN_LDAP_PASSWORD: ${_param:kqueen_api_ldap_password}
vnaumov61c1a482018-04-04 11:14:08 +0400[diff] [blame]45 KQUEEN_AUTH_MODULES: ${_param:kqueen_api_auth_modules}
Vnaumov1acc3692018-03-15 19:27:56 +0400[diff] [blame]46 KQUEEN_ETCD_HOST: ${_param:kqueen_api_db_host}
47 KQUEEN_PROMETHEUS_WHITELIST: ${_param:kqueen_api_prometheus_whitelist}
48 KQUEEN_SECRET_KEY: ${_param:kqueen_credentials:kqueen_api_secret_key}
49 BOOTSTRAP_ADMIN: ${_param:kqueen_credentials:kqueen_api_bootstrap_admin}
50 BOOTSTRAP_ADMIN_USERNAME: ${_param:kqueen_credentials:kqueen_api_admin_username}
51 BOOTSTRAP_ADMIN_PASSWORD: ${_param:kqueen_credentials:kqueen_api_admin_password}
52 BOOTSTRAP_ADMIN_ORGANIZATION: ${_param:kqueen_credentials:kqueen_api_admin_organization}
53 BOOTSTRAP_ADMIN_NAMESPACE: ${_param:kqueen_credentials:kqueen_api_admin_namespace}
54 deploy:
55 replicas: ${_param:docker_kqueen_api_replicas}
56 restart_policy:
57 condition: any
58 ports:
59 - ${_param:haproxy_kqueen_api_exposed_port}:${_param:haproxy_kqueen_api_bind_port}
60 volumes:
61 - /srv/volumes/kqueen/logs/:/var/log/kqueen-api
62 kqueen-ui:
63 image: ${_param:docker_image_kqueen_ui}
64 environment:
65 KQUEENUI_PREFERRED_URL_SCHEME: https
66 KQUEENUI_DEBUG: ${_param:kqueen_ui_debug}
67 KQUEEN_UI_CONFIG_FILE: config/prod.py
68 KQUEENUI_SECRET_KEY: ${_param:kqueen_credentials:kqueen_ui_secret_key}
69 KQUEENUI_KQUEEN_API_URL: http://${_param:kqueen_api_bind_host}:${_param:kqueen_api_bind_port}/api/v1/
70 KQUEENUI_KQUEEN_AUTH_URL: http://${_param:kqueen_api_bind_host}:${_param:kqueen_api_bind_port}/api/v1/auth
71 KQUEENUI_KQUEEN_SERVICE_USER_USERNAME: ${_param:kqueen_credentials:kqueen_api_admin_username}
72 KQUEENUI_KQUEEN_SERVICE_USER_PASSWORD: ${_param:kqueen_credentials:kqueen_api_admin_password}
73 KQUEENUI_MAIL_SERVER: ${_param:kqueen_ui_mail_host}
74 KQUEENUI_MAIL_PORT: ${_param:kqueen_ui_mail_port}
75 KQUEENUI_ENABLE_PUBLIC_REGISTRATION: ${_param:kqueen_ui_enable_public_registration}
vnaumov61c1a482018-04-04 11:14:08 +0400[diff] [blame]76 KQUEENUI_LDAP_AUTH_NOTIFY: ${_param:kqueen_ui_ldap_auth_notify}
77 KQUEENUI_LOCAL_AUTH_NOTIFY: ${_param:kqueen_ui_local_auth_notify}
Vnaumov1acc3692018-03-15 19:27:56 +0400[diff] [blame]78 STATIC_DIR: /mnt/static/
79 deploy:
80 replicas: ${_param:docker_kqueen_ui_replicas}
81 restart_policy:
82 condition: any
83 ports:
84 - ${_param:haproxy_kqueen_ui_exposed_port}:${_param:haproxy_kqueen_ui_bind_port}
85 volumes:
86 - /srv/volumes/kqueen/logs/:/var/log/kqueen-ui
87 etcd:
88 image: quay.io/coreos/etcd:latest
89 environment:
90 ETCD_NAME: 0
91 ETCD_INITIAL_ADVERTISE_PEER_URLS: http://etcd:2380
92 ETCD_INITIAL_CLUSTER_STATE: new
93 ETCD_INITIAL_CLUSTER_TOKEN: etcd-cluster-1
94 ETCD_LISTEN_CLIENT_URLS: http://0.0.0.0:${_param:haproxy_etcd_bind_port}
95 ETCD_LISTEN_PEER_URLS: http://0.0.0.0:2380
96 ETCD_ADVERTISE_CLIENT_URLS: http://127.0.0.1:4001,http://etcd:${_param:haproxy_etcd_bind_port}
97 ports:
98 - ${_param:haproxy_etcd_exposed_port}:${_param:haproxy_etcd_bind_port}
99 volumes:
100 - /srv/volumes/etcd:/0.etcd/
101 network:
102 default:
103 external:
104 name: kqueen_backend