description "Master role applied to ironbelly"
default_attributes(
+ :dhcpd => {
+ :first_address => "10.0.63.1",
+ :last_address => "10.0.63.254"
+ },
+ :elasticsearch => {
+ :cluster => {
+ :routing => {
+ :allocation => {
+ :disk => {
+ :watermark => {
+ :low => "95%",
+ :high => "98%",
+ :flood_stage => "99%"
+ }
+ }
+ }
+ }
+ },
+ :path => {
+ :data => "/store/elasticsearch"
+ }
+ },
:networking => {
:interfaces => {
- :external_ipv4 => {
- :interface => "eth0",
- :role => :external,
- :family => :inet,
- :address => ""
+ :internal => {
+ :interface => "bond0",
+ :role => :internal,
+ :inet => {
+ :address => "10.0.48.10"
+ },
+ :bond => {
+ :mode => "802.3ad",
+ :lacprate => "fast",
+ :xmithashpolicy => "layer3+4",
+ :slaves => %w[eth0 eth1]
+ }
},
- :external_ipv6 => {
- :interface => "eth0",
+ :external_cogent => {
+ :interface => "bond0.2",
:role => :external,
- :family => :inet6,
- :address => ""
+ :metric => 150,
+ :source_route_table => 100,
+ :inet => {
+ :address => "130.117.76.10",
+ :prefix => "27",
+ :gateway => "130.117.76.1"
+ },
+ :inet6 => {
+ :address => "2001:978:2:2c::172:a",
+ :prefix => "64",
+ :gateway => "2001:978:2:2c::172:1",
+ :routes => {
+ "2001:470:1:b3b::/64" => { :type => "unreachable" }
+ }
+ }
},
- :internal_ipv4 => {
- :interface => "eth1",
- :role => :internal,
- :family => :inet,
- :address => ""
+ :external => {
+ :interface => "bond0.3",
+ :role => :external,
+ :source_route_table => 150,
+ :inet => {
+ :address => "184.104.179.138",
+ :prefix => "27",
+ :gateway => "184.104.179.129"
+ },
+ :inet6 => {
+ :address => "2001:470:1:fa1::a",
+ :prefix => "64",
+ :gateway => "2001:470:1:fa1::1"
+ }
+ }
+ }
+ },
+ :prometheus => {
+ :snmp => {
+ "pdu1" => { :address => "10.0.48.100", :modules => %w[apcups], :labels => { "site" => "amsterdam" } },
+ "pdu2" => { :address => "10.0.48.101", :modules => %w[apcups], :labels => { "site" => "amsterdam" } },
+ "switch1" => { :address => "184.104.179.129", :modules => %w[if_mib juniper_ex4300], :labels => { "site" => "amsterdam" } }
+ },
+ :metrics => {
+ :uplink_interface => {
+ :help => "Site uplink interface name",
+ :labels => { :site => "amsterdam", :name => "ge-[01]/2/0|ae60" }
+ }
+ }
+ },
+ :rsyncd => {
+ :modules => {
+ :logs => {
+ :comment => "Log files",
+ :path => "/store/logs",
+ :read_only => false,
+ :write_only => true,
+ :list => false,
+ :uid => "www-data",
+ :gid => "www-data",
+ :transfer_logging => false,
+ :hosts_allow => [
+ "193.60.236.0/24", # ucl external
+ "10.0.48.0/20", # amsterdam internal
+ "130.117.76.0/27", # amsterdam external (cogent)
+ "2001:978:2:2c::172:0/112", # amsterdam external (cogent)
+ "184.104.179.128/27", # amsterdam external (he)
+ "2001:470:1:fa1::/64", # amsterdam external (he)
+ "10.0.64.0/20", # dublin internal
+ "184.104.226.96/27", # dublin external
+ "2001:470:1:b3b::/64", # dublin external
+ "10.0.32.0/20", # bytemark internal
+ "89.16.162.16/28", # bytemark external
+ "2001:41c9:2:d6::/64", # bytemark external
+ "127.0.0.0/8", # localhost
+ "::1" # localhost
+ ]
}
}
}
-);
+)
run_list(
- "role[ic]"
+ "role[equinix-ams]",
+ "role[gateway]",
+ "recipe[rsyncd]",
+ "recipe[dhcpd]"
)