X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/fba89b0d71a9dd87d0c3c57fb2f84263c3b36a14..d62008814effff58445617b19ff7367742d64d34:/roles/ironbelly.rb diff --git a/roles/ironbelly.rb b/roles/ironbelly.rb index 988d636eb..635e197fa 100644 --- a/roles/ironbelly.rb +++ b/roles/ironbelly.rb @@ -5,6 +5,13 @@ default_attributes( :apt => { :sources => ["ubuntugis-unstable"] }, + :bind => { + :clients => "equinix-ams" + }, + :dhcpd => { + :first_address => "10.0.63.1", + :last_address => "10.0.63.254" + }, :elasticsearch => { :cluster => { :routing => { @@ -12,7 +19,8 @@ default_attributes( :disk => { :watermark => { :low => "95%", - :high => "98%" + :high => "98%", + :flood_stage => "99%" } } } @@ -28,72 +36,43 @@ default_attributes( :interface => "bond0", :role => :internal, :family => :inet, - :address => "10.0.48.2", + :address => "10.0.48.10", :bond => { :slaves => %w[eth0 eth1] } }, :external_ipv4 => { - :interface => "bond0.3", + :interface => "bond0.2", :role => :external, :family => :inet, - :address => "130.117.76.2" - }, - # :external_ipv6 => { - # :interface => "bond0.3", - # :role => :external, - # :family => :inet6, - # :address => "2001:978:2:2C::172:1002" - # } - } - }, - :openvpn => { - :address => "10.0.16.2", - :tunnels => { - :ic2ucl => { - :port => "1194", - :mode => "server", - :peer => { - :host => "ridley.openstreetmap.org" - } - }, - :aws2ic => { - :port => "1195", - :mode => "server", - :peer => { - :host => "fafnir.openstreetmap.org" - } + :address => "130.117.76.10" }, - :ic2bm => { - :port => "1196", - :mode => "client", - :peer => { - :host => "grisu.openstreetmap.org", - :port => "1194" - } + :external_ipv6 => { + :interface => "bond0.2", + :role => :external, + :family => :inet6, + :address => "2001:978:2:2C::172:A" } } }, :planet => { - :replication => "disabled" + :replication => "enabled" + }, + :prometheus => { + :snmp => { + "pdu1" => { :address => "10.0.48.100", :modules => %w[apcups], :labels => { "site" => "amsterdam" } }, + "pdu2" => { :address => "10.0.48.101", :modules => %w[apcups], :labels => { "site" => "amsterdam" } }, + "switch1" => { :address => "130.117.76.2", :modules => %w[if_mib cisco_550x], :labels => { "site" => "amsterdam" } } + }, + :metrics => { + :uplink_interface => { + :help => "Site uplink interface name", + :labels => { :site => "amsterdam", :name => "te[12]/0/1" } + } + } }, :rsyncd => { :modules => { - :hosts => { - :comment => "Host data", - :path => "/home/hosts", - :read_only => true, - :write_only => false, - :list => false, - :uid => "tomh", - :gid => "tomh", - :transfer_logging => false, - :hosts_allow => [ - "212.110.172.32", # shenron - "2001:41c9:1:400::32", # shenron - "212.159.112.221" # grant - ] - }, :logs => { :comment => "Log files", :path => "/store/logs", @@ -105,32 +84,31 @@ default_attributes( :transfer_logging => false, :hosts_allow => [ "193.60.236.0/24", # ucl external - "10.0.48.0/20", # equinix internal - "130.117.76.0/27", # equinix external - "2001:978:2:2C::172:0/112", # equinix external + "10.0.48.0/20", # amsterdam internal + "130.117.76.0/27", # amsterdam external + "2001:978:2:2C::172:0/112", # amsterdam external + "10.0.64.0/20", # dublin internal + "184.104.226.96/27", # dublin external + "2001:470:1:b3b::/64", # dublin external "10.0.32.0/20", # bytemark internal "89.16.162.16/28", # bytemark external "2001:41c9:2:d6::/64", # bytemark external "127.0.0.0/8", # localhost "::1" # localhost - ], - :nodes_allow => "roles:tilecache" + ] } } } ) run_list( - "role[ic]", + "role[equinix-ams]", "role[gateway]", - "role[web-storage]", "role[supybot]", "role[backup]", - "role[stats]", "role[planet]", - # "role[planetdump]", - "role[logstash]", + "role[planetdump]", "recipe[rsyncd]", - "recipe[openvpn]", + "recipe[dhcpd]", "recipe[tilelog]" )