X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/066b1f8688516068b04bb0a555f269be0510f322..2393d43ecd842c910fea83ff38110e42c4d631d0:/roles/ironbelly.rb?ds=sidebyside diff --git a/roles/ironbelly.rb b/roles/ironbelly.rb index 4eb5fbc45..209b35170 100644 --- a/roles/ironbelly.rb +++ b/roles/ironbelly.rb @@ -2,8 +2,9 @@ name "ironbelly" description "Master role applied to ironbelly" default_attributes( - :apt => { - :sources => ["ubuntugis-unstable"] + :dhcpd => { + :first_address => "10.0.63.1", + :last_address => "10.0.63.254" }, :elasticsearch => { :cluster => { @@ -12,7 +13,8 @@ default_attributes( :disk => { :watermark => { :low => "95%", - :high => "98%" + :high => "98%", + :flood_stage => "99%" } } } @@ -22,123 +24,63 @@ default_attributes( :data => "/store/elasticsearch" } }, - :git => { - :allowed_nodes => "*:*", - :user => "chefrepo", - :group => "chefrepo", - :backup => "chef-git" - }, :networking => { :interfaces => { - :internal_ipv4 => { - :interface => "eth0", + :internal => { + :interface => "bond0", :role => :internal, - :family => :inet, - :address => "146.179.159.177" - }, - :external_ipv4 => { - :interface => "eth1", - :role => :external, - :family => :inet, - :address => "193.63.75.107" + :inet => { + :address => "10.0.48.10" + }, + :bond => { + :mode => "802.3ad", + :lacprate => "fast", + :xmithashpolicy => "layer3+4", + :slaves => %w[enp2s0f0 enp2s0f1] + } }, - :external_ipv6 => { - :interface => "eth1", + :external => { + :interface => "bond0.3", :role => :external, - :family => :inet6, - :address => "2001:630:12:500:225:90ff:fec4:f6ef" + :inet => { + :address => "184.104.179.138" + }, + :inet6 => { + :address => "2001:470:1:fa1::a" + } } } }, - :openvpn => { - :address => "10.0.16.2", - :tunnels => { - :ic2ucl => { - :port => "1194", - :mode => "server", - :peer => { - :host => "ridley.openstreetmap.org" - } - }, - :aws2ic => { - :port => "1195", - :mode => "server", - :peer => { - :host => "fafnir.openstreetmap.org" - } - }, - :ic2bm => { - :port => "1196", - :mode => "client", - :peer => { - :host => "grisu.openstreetmap.org", - :port => "1194" - } + :prometheus => { + :junos => { + "switch1" => { :address => "184.104.179.129", :labels => { "site" => "amsterdam" } } + }, + :snmp => { + "pdu1" => { :address => "10.0.48.100", :modules => %w[apcups], :labels => { "site" => "amsterdam" } }, + "pdu2" => { :address => "10.0.48.101", :modules => %w[apcups], :labels => { "site" => "amsterdam" } } + }, + :metrics => { + :uplink_interface => { + :help => "Site uplink interface name", + :labels => { :site => "amsterdam", :name => "ge-[01]/2/[02]" } } } }, - :planet => { - :replication => "enabled" - }, - :rsyncd => { - :modules => { - :hosts => { - :comment => "Host data", - :path => "/home/hosts", - :read_only => true, - :write_only => false, - :list => false, - :uid => "tomh", - :gid => "tomh", - :transfer_logging => false, - :hosts_allow => [ - "212.110.172.32", # shenron - "2001:41c9:1:400::32", # shenron - "212.159.112.221" # grant - ] - }, - :logs => { - :comment => "Log files", - :path => "/store/logs", - :read_only => false, - :write_only => true, - :list => false, - :uid => "www-data", - :gid => "www-data", - :transfer_logging => false, - :hosts_allow => [ - "128.40.168.0/24", # ucl external (wates) - "128.40.45.192/27", # ucl external (wolfson) - "146.179.159.160/27", # ic internal - "193.63.75.96/27", # ic external - "2001:630:12:500::/64", # ic external - "10.0.32.0/20", # bytemark internal - "89.16.162.16/28", # bytemark external - "2001:41c9:2:d6::/64", # bytemark external - "127.0.0.0/8", # localhost - "::1" # localhost - ], - :nodes_allow => "roles:tilecache" + :nginx => { + :cache => { + :proxy => { + :enable => true, + :keys_zone => "proxy_cache_zone:256M", + :inactive => "180d", + :max_size => "51200M" } } } ) run_list( - "role[ic]", + "role[equinix-ams]", "role[gateway]", - "role[chef-server]", - "role[chef-repository]", - "role[web-storage]", - "role[supybot]", - "role[backup]", - "role[stats]", - "role[planet]", - "role[planetdump]", - "role[logstash]", "recipe[rsyncd]", - "recipe[openvpn]", - "recipe[git::server]", - "recipe[tilelog]", - "recipe[serverinfo]" + "recipe[dhcpd]" )