X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/7862d728d8217f3b3b47ff404364363646da82fc..c410bf74e84ca08033e1e8820a2e21a8de5b91c5:/roles/ironbelly.rb?ds=inline diff --git a/roles/ironbelly.rb b/roles/ironbelly.rb index 252848d30..ad5ea034b 100644 --- a/roles/ironbelly.rb +++ b/roles/ironbelly.rb @@ -2,30 +2,121 @@ name "ironbelly" description "Master role applied to ironbelly" default_attributes( + :apt => { + :sources => ["ubuntugis-unstable"] + }, + :bind => { + :clients => "equinix" + }, + :dhcpd => { + :first_address => "10.0.63.1", + :last_address => "10.0.63.254" + }, + :elasticsearch => { + :cluster => { + :routing => { + :allocation => { + :disk => { + :watermark => { + :low => "95%", + :high => "98%", + :flood_stage => "99%" + } + } + } + } + }, + :path => { + :data => "/store/elasticsearch" + } + }, :networking => { :interfaces => { :internal_ipv4 => { - :interface => "eth0", + :interface => "bond0", :role => :internal, :family => :inet, - :address => "146.179.159.177" + :address => "10.0.48.10", + :bond => { + :slaves => %w[eth0 eth1] + } }, :external_ipv4 => { - :interface => "eth1", + :interface => "bond0.2", :role => :external, :family => :inet, - :address => "193.63.75.107" + :address => "130.117.76.10" }, :external_ipv6 => { - :interface => "eth1", + :interface => "bond0.2", :role => :external, :family => :inet6, - :address => "2001:630:12:500:225:90ff:fec4:f6ef" + :address => "2001:978:2:2C::172:A" + } + } + }, + :planet => { + :replication => "enabled" + }, + :prometheus => { + :snmp => { + "pdu1" => { :address => "10.0.48.100", :module => "apcups", :labels => { "site" => "amsterdam" } }, + "pdu2" => { :address => "10.0.48.101", :module => "apcups", :labels => { "site" => "amsterdam" } }, + "switch1" => { :address => "130.117.76.2", :module => "if_mib", :labels => { "site" => "amsterdam" } } + } + }, + :rsyncd => { + :modules => { + :hosts => { + :comment => "Host data", + :path => "/home/hosts", + :read_only => true, + :write_only => false, + :list => false, + :uid => "tomh", + :gid => "tomh", + :transfer_logging => false, + :hosts_allow => [ + "212.110.172.32", # shenron + "2001:41c9:1:400::32", # shenron + "212.159.112.221" # grant + ] + }, + :logs => { + :comment => "Log files", + :path => "/store/logs", + :read_only => false, + :write_only => true, + :list => false, + :uid => "www-data", + :gid => "www-data", + :transfer_logging => false, + :hosts_allow => [ + "193.60.236.0/24", # ucl external + "10.0.48.0/20", # equinix internal + "130.117.76.0/27", # equinix external + "2001:978:2:2C::172:0/112", # equinix external + "10.0.32.0/20", # bytemark internal + "89.16.162.16/28", # bytemark external + "2001:41c9:2:d6::/64", # bytemark external + "127.0.0.0/8", # localhost + "::1" # localhost + ], + :nodes_allow => "roles:tilecache" } } } -); +) run_list( - "role[ic]" + "role[equinix]", + "role[gateway]", + "role[web-storage]", + "role[supybot]", + "role[backup]", + "role[planet]", + "role[planetdump]", + "recipe[rsyncd]", + "recipe[dhcpd]", + "recipe[tilelog]" )