-
Notifications
You must be signed in to change notification settings - Fork 17
/
manifest.yml
135 lines (131 loc) · 4.62 KB
/
manifest.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
---
# To apply this manifest: cf push --vars-file vars.yml
applications:
- name: ((app_name))-web
buildpacks:
- https://github.com/cloudfoundry/apt-buildpack
- python_buildpack
services:
- ((app_name))-db
- ((app_name))-redis
- ((app_name))-s3
- ((app_name))-secrets
- ((app_name))-solr
- sysadmin-users
routes:
- route: ((route-internal))
health-check-type: http
health-check-http-endpoint: /dataset
health-check-invocation-timeout: 60
instances: ((web-instances))
disk_quota: 2G
memory: ((memory_quota))
command: ./ckan/setup/server_start.sh
env:
CKANEXT__SAML2AUTH__IDP_METADATA__LOCAL_PATH: ((ckanext__saml2auth__idp_metadata__local_path))
CKANEXT__SAML2AUTH__ENTITY_ID: ((ckanext__saml2auth__entity_id))
SAML2_CERTIFICATE: ((saml2_certificate))
NEW_RELIC_APP_NAME: ((app_name))-web-((space_name))
NEW_RELIC_HOST: gov-collector.newrelic.com
NEW_RELIC_MONITOR_MODE: ((new_relic_monitor_mode))
CKAN_SITE_URL: https://((route-public))
CKAN___GOOGLEANALYTICS__ID: ((googleanalytics_id))
- name: ((app_name))-admin
buildpacks:
- https://github.com/cloudfoundry/apt-buildpack
- python_buildpack
services:
- ((app_name))-db
- ((app_name))-redis
- ((app_name))-secrets
- ((app_name))-solr
- ((app_name))-smtp
- ((app_name))-s3
- sysadmin-users
routes:
- route: ((route-internal-admin))
health-check-type: http
health-check-http-endpoint: /dataset
health-check-invocation-timeout: 60
instances: ((admin-instances))
disk_quota: 2G
memory: ((memory_quota))
command: ./ckan/setup/server_start.sh
env:
CKANEXT__SAML2AUTH__IDP_METADATA__LOCAL_PATH: ((ckanext__saml2auth__idp_metadata__local_path))
CKANEXT__SAML2AUTH__ENTITY_ID: ((ckanext__saml2auth__entity_id))
SAML2_CERTIFICATE: ((saml2_certificate))
NEW_RELIC_APP_NAME: ((app_name))-admin-((space_name))
NEW_RELIC_HOST: gov-collector.newrelic.com
NEW_RELIC_MONITOR_MODE: ((new_relic_monitor_mode))
CKAN_SITE_URL: https://((route-external-admin))
- name: ((app_name))-proxy
buildpacks:
- https://github.com/cloudfoundry/nginx-buildpack
services:
- ((app_name))-secrets
- ((app_name))-s3
path: ./proxy
# TODO: tweak with load testing
memory: 100M
instances: ((proxy-instances))
routes:
- route: ((route-external))
- route: ((route-external-admin))
env:
PUBLIC_ROUTE: ((route-public))
EXTERNAL_ROUTE: ((route-external))
INTERNAL_ROUTE: ((route-internal))
EXTERNAL_ROUTE_ADMIN: ((route-external-admin))
INTERNAL_ROUTE_ADMIN: ((route-internal-admin))
DENY_PACKAGE_CREATE: ((deny_package_create))
- name: ((app_name))-gather
buildpacks:
- https://github.com/cloudfoundry/apt-buildpack
- python_buildpack
services:
- ((app_name))-db
- ((app_name))-redis
- ((app_name))-secrets
- ((app_name))-solr
- ((app_name))-s3
- sysadmin-users
no-route: true
instances: ((gather-instances))
disk_quota: 1.5G
memory: ((gather_memory_quota))
command: newrelic-admin run-program ckan harvester gather-consumer
health-check-type: process
timeout: 15
env:
CKANEXT__SAML2AUTH__IDP_METADATA__LOCAL_PATH: ((ckanext__saml2auth__idp_metadata__local_path))
CKANEXT__SAML2AUTH__ENTITY_ID: ((ckanext__saml2auth__entity_id))
SAML2_CERTIFICATE: ((saml2_certificate))
NEW_RELIC_APP_NAME: ((app_name))-gather-((space_name))
NEW_RELIC_HOST: gov-collector.newrelic.com
NEW_RELIC_MONITOR_MODE: ((new_relic_monitor_mode))
CKAN_SITE_URL: https://((route-public))
- name: ((app_name))-fetch
buildpacks:
- https://github.com/cloudfoundry/apt-buildpack
- python_buildpack
services:
- ((app_name))-db
- ((app_name))-redis
- ((app_name))-secrets
- ((app_name))-solr
- sysadmin-users
no-route: true
instances: ((fetch-instances))
disk_quota: 1.5G
command: newrelic-admin run-program sh -c 'while ! ckan harvester fetch-consumer; do sleep 10; done'
health-check-type: process
timeout: 15
env:
CKANEXT__SAML2AUTH__IDP_METADATA__LOCAL_PATH: ((ckanext__saml2auth__idp_metadata__local_path))
CKANEXT__SAML2AUTH__ENTITY_ID: ((ckanext__saml2auth__entity_id))
SAML2_CERTIFICATE: ((saml2_certificate))
NEW_RELIC_APP_NAME: ((app_name))-fetch-((space_name))
NEW_RELIC_HOST: gov-collector.newrelic.com
NEW_RELIC_MONITOR_MODE: ((new_relic_monitor_mode))
CKAN_SITE_URL: https://((route-public))