cloud-mu 1.9.0.pre.beta

data/cookbooks/mu-glusterfs/recipes/client.rb

@@ -0,0 +1,62 @@
+#
+# Cookbook Name:: mu-glusterfs
+# Recipe:: client
+#
+# Copyright 2014, eGlobalTech
+#
+# All rights reserved - Do Not Redistribute
+#
+
+
+case node['platform']
+  when "centos"
+    include_recipe "mu-glusterfs"
+
+    %w{glusterfs glusterfs-fuse}.each do |pkg|
+      package pkg
+    end
+
+    include_recipe 'mu-firewall'
+
+    node['glusterfs']['fw'].each { |rule|
+      firewall_rule "Allow glusterfs #{rule['usage']}" do
+        port rule['port_range']
+      end
+    }
+
+    directory node['glusterfs']['client']['mount_path'] do
+      recursive true
+      mode "0755"
+    end
+
+    if node['glusterfs']['discovery'] == 'groupname'
+      gluster_servers = search(
+          :node,
+          "glusterfs_is_server:true AND glusterfs_groupname:#{node['glusterfs_groupname']}"
+      )
+    end rescue NoMethodError
+    if gluster_servers.nil?
+      gluster_servers = search(
+          :node,
+          "glusterfs_is_server:true AND chef_environment:#{node.chef_environment}"
+      )
+    end
+
+    template "/etc/init.d/mu-gluster-client" do
+      source "mu-gluster-client.erb"
+      variables(
+          :servers => gluster_servers,
+          :path => node['glusterfs']['client']['mount_path'],
+          :volume => node['glusterfs']['server']['volume']
+      )
+      mode 0755
+    end
+
+    service "mu-gluster-client" do
+      action [:enable, :start]
+    end
+
+  else
+    Chef::Log.info("Unsupported platform #{node['platform']}")
+end
+

data/cookbooks/mu-glusterfs/recipes/default.rb

@@ -0,0 +1,16 @@
+#
+# Cookbook Name:: mu-glusterfs
+# Recipe:: repo
+#
+# Copyright 2014, eGlobalTech
+#
+# All rights reserved - Do Not Redistribute
+#
+
+case node['platform']
+  when "centos"
+    package "centos-release-gluster"
+
+  else
+    Chef::Log.info("Unsupported platform #{node['platform']}")
+end

data/cookbooks/mu-glusterfs/recipes/samba.rb

@@ -0,0 +1,57 @@
+#
+# Cookbook Name:: mu-glusterfs
+# Recipe:: samba
+#
+# Copyright 2014, eGlobalTech
+#
+# All rights reserved - Do Not Redistribute
+#
+
+::Chef::Recipe.send(:include, Chef::Mixin::ShellOut)
+
+case node['platform']
+  when "centos"
+    include_recipe "mu-glusterfs"
+
+#    %w{samba-vfs-glusterfs samba-client samba}.each do |pkg|
+#      package pkg
+#    end
+    %w{samba4 samba4-client samba4-winbind samba4-winbind-clients samba4-winbind-krb5-locator}.each { |pkg|
+      package pkg
+    }
+
+    service "smb"
+
+    ["137", "139", "445"].each { |port|
+      bash "Allow #{port} through iptables" do
+        user "root"
+        not_if "/sbin/iptables -nL | egrep '^ACCEPT.*dpt:#{port}($| )'"
+        code <<-EOH
+					iptables -I INPUT -s 10.0.0.0/8 --dport #{port} -j ACCEPT
+					service iptables save
+        EOH
+      end
+    }
+
+    directory "/etc/samba/includes"
+    template "/etc/samba/includes/smb.gluster.conf" do
+      source "smb.conf.erb"
+      owner "root"
+      group "root"
+      mode 0644
+      cookbook "mu-glusterfs"
+      notifies :restart, "service[smb]", :immediately
+    end
+    execute "setsebool -P samba_run_unconfined on" do
+      not_if "getsebool samba_run_unconfined | grep ' on$'"
+    end
+    execute "setsebool -P samba_export_all_rw on" do
+      not_if "getsebool samba_export_all_rw | grep ' on$'"
+    end
+
+
+    directory "/run/samba"
+
+  else
+    Chef::Log.info("Unsupported platform #{node['platform']}")
+end

data/cookbooks/mu-glusterfs/recipes/server.rb

@@ -0,0 +1,200 @@
+#
+# Cookbook Name:: mu-glusterfs
+# Recipe:: server
+#
+# Copyright 2014, eGlobalTech
+#
+# All rights reserved - Do Not Redistribute
+#
+
+::Chef::Recipe.send(:include, Chef::Mixin::ShellOut)
+
+
+case node['platform']
+  when "centos"
+    include_recipe "mu-glusterfs"
+    $nodeclass = node['gluster_node_class']
+
+    package node['glusterfs']['server']['packages']
+
+    if node['glusterfs']['server']['raid']
+      def raid_no_spare(mount_dev, level, num_devices, devices)
+        execute "yes | mdadm -Cv #{mount_dev} -l#{level} -n#{num_devices} #{devices}" do
+          not_if "mdadm --detail #{mount_dev}"
+        end
+      end
+
+      def raid_with_spare(mount_dev, level, num_devices, devices, spare_device)
+        execute "yes | mdadm -Cv #{mount_dev} -l#{level} -n#{num_devices} #{devices} -x1 #{spare_device}" do
+          not_if "mdadm --detail #{mount_dev}"
+        end
+      end
+
+      if node['glusterfs']['server']['raid_level'] == 10
+        array1, array2 = node['glusterfs']['server']['devices'].each_slice(node['glusterfs']['server']['devices'].size/2).to_a
+        if node['glusterfs']['server']['raid_spare_vol']
+          array1_spare_device = array1.pop
+          array2_spare_device = array2.pop
+          raid_with_spare("/dev/md1", 1, array1.size, array1.join(" "), array1_spare_device)
+          raid_with_spare("/dev/md2", 1, array2.size, array2.join(" "), array2_spare_device)
+        else
+          raid_no_spare("/dev/md1", 1, array1.size, array1.join(" "))
+          raid_no_spare("/dev/md2", 1, array2.size, array2.join(" "))
+        end
+        raid_no_spare("/dev/md0", 0, 2, "/dev/md1 /dev/md2")
+      else
+        node['glusterfs']['server']['raid_levels_map'].each do |type|
+          if node['glusterfs']['server']['raid_spare_vol']
+            if type['level'] == node['glusterfs']['server']['raid_level'] and type['spare'] == node['glusterfs']['server']['raid_spare_vol'] and node['glusterfs']['server']['devices'.size] >= type['min_devcies']
+              spare_device = node['glusterfs']['server']['devices'].pop
+              raid_with_spare(node['glusterfs']['server']['raid_dev'], node['glusterfs']['server']['raid_level'], node['glusterfs']['server']['devices'].size, node['glusterfs']['server']['devices'].join(" "), spare_device)
+            end
+          else
+            if type['level'] == node['glusterfs']['server']['raid_level'] and type['spare'] == node['glusterfs']['server']['raid_spare_vol'] and node['glusterfs']['server']['devices'].size >= type['min_devcies']
+              raid_no_spare(node['glusterfs']['server']['raid_dev'], node['glusterfs']['server']['raid_level'], node['glusterfs']['server']['devices'].size, node['glusterfs']['server']['devices'].join(" "))
+            end
+          end
+        end
+      end
+
+      execute "mdadm --detail --scan >> /etc/mdadm.conf" do
+        not_if { File.exists?("/etc/mdadm.conf") }
+      end
+
+      execute "mkfs -t xfs -i size=512 #{node['glusterfs']['server']['raid_dev']}" do
+        not_if "xfs_info #{node['glusterfs']['server']['raid_dev']}"
+      end
+
+      $gluster_mnt_pt = "#{node['glusterfs']['server']['brick_base_mount_path']}#{node['glusterfs']['server']['raid_dev']}"
+
+      directory $gluster_mnt_pt do
+        recursive true
+      end
+      mount $gluster_mnt_pt do
+        device node['glusterfs']['server']['raid_dev']
+        fstype "xfs"
+        action [:mount, :enable]
+      end
+      directory "#{$gluster_mnt_pt}/brick"
+      execute "chmod go+rx #{$gluster_mnt_pt}"
+
+    else
+      $gluster_mnt_pts = []
+      node['glusterfs']['server']['devices'].each do |dev|
+        execute "mkfs -t xfs -i size=512 #{dev}" do
+          not_if "xfs_info #{dev}"
+        end
+        directory "#{node['glusterfs']['server']['brick_base_mount_path']}#{dev}" do
+          recursive true
+        end
+        mount "#{node['glusterfs']['server']['brick_base_mount_path']}#{dev}" do
+          device dev
+          fstype "xfs"
+          action [:mount, :enable]
+        end
+        directory "#{node['glusterfs']['server']['brick_base_mount_path']}#{dev}/brick"
+
+        execute "chmod go+rx #{node['glusterfs']['server']['brick_base_mount_path']} #{node['glusterfs']['server']['brick_base_mount_path']}#{dev}"
+
+        $gluster_mnt_pts << "#{node['glusterfs']['server']['brick_base_mount_path']}#{dev}"
+      end
+    end
+
+    include_recipe 'mu-firewall'
+
+    node['glusterfs']['fw'].each { |rule|
+      firewall_rule "Allow glusterfs #{rule['usage']}" do
+        port rule['port_range']
+      end
+    }
+
+    service "glusterd" do
+      action [:enable, :start]
+    end
+
+    found_master = false
+    i_am_master = false
+    node['deployment']['servers'][$nodeclass].each_pair { |name, data|
+      if data['gluster_master']
+        found_master = true
+        if name == Chef::Config['node_name']
+          i_am_master = true
+        end
+      end
+    } rescue NoMethodError
+    if !found_master
+      node.normal['deployment']['servers'][$nodeclass][Chef::Config['node_name']]['gluster_master'] = true
+      i_am_master = true
+    end
+    node.normal['glusterfs_is_server'] = true
+    node.save
+
+    if i_am_master
+      ips = []
+      node['deployment']['servers'][$nodeclass].each_pair do |name, data|
+        next if data['private_ip_address'].nil? or data['private_ip_address'].empty?
+        execute "gluster peer probe #{data['private_ip_address']}" do
+          not_if { data['private_ip_address'] == node['ipaddress'] }
+        end
+        ips << data['private_ip_address']
+      end
+
+      if ips.size >= node['glusterfs']['server']['num_replicas']
+        bricks = []
+        ips.each do |ip|
+          if node['glusterfs']['server']['raid']
+            bricks << "#{ip}:#{$gluster_mnt_pt}/brick"
+          else
+            $gluster_mnt_pts.each do |mount_point|
+              bricks << "#{ip}:#{mount_point}/brick"
+            end
+          end
+        end
+
+        bash "Create gluster volume #{node['glusterfs']['server']['volume']}" do
+          not_if "gluster volume info #{node['glusterfs']['server']['volume']}"
+          code "gluster volume create #{node['glusterfs']['server']['volume']} #{node['glusterfs']['server']['volume_type']} #{node['glusterfs']['server']['num_replicas']} transport tcp #{bricks.join(" ")}"
+        end
+
+        bash "Start gluster volume #{node['glusterfs']['server']['volume']}" do
+          not_if "gluster volume info #{node['glusterfs']['server']['volume']} | grep Started"
+          code "gluster volume start #{node['glusterfs']['server']['volume']}"
+        end
+
+        bash "Set network timeout on #{node['glusterfs']['server']['volume']}" do
+          not_if "gluster volume info #{node['glusterfs']['server']['volume']} | grep 'network.ping-timeout: #{node['glusterfs']['server']['network_timeout']}'"
+          code "gluster volume set #{node['glusterfs']['server']['volume']} network.ping-timeout #{node['glusterfs']['server']['network_timeout']}"
+        end
+
+        bash "Set read cache max size on #{node['glusterfs']['server']['volume']}" do
+          not_if "gluster volume info #{node['glusterfs']['server']['volume']} | grep 'performance.cache-size: #{node['glusterfs']['server']['read_cache_size']}'"
+          code "gluster volume set #{node['glusterfs']['server']['volume']} performance.cache-size #{node['glusterfs']['server']['read_cache_size']}"
+        end
+
+
+        # gluster_vol_exists = shell_out("gluster volume info #{node['glusterfs']['server']['volume']}")
+        # if gluster_vol_exists.stderr.empty? and !gluster_vol_exists.stdout.empty?
+        # ips.each do |ip|
+        # bash "Remove failed brick/instance fro GlusterFS Cluster" do
+        # not_if "gluster volume info #{node['glusterfs']['server']['volume']} | grep #{ip}"
+        # code <<-EOH
+        # "gluster peer status | grep -B 2 Disconnected | grep #{old_instnace}"
+        # "gluster volume replace-brick #{node['glusterfs']['server']['volume']} #{old_instnace}:/gluster/dev/md0/brick #{new_instance}:/gluster/dev/md0/brick start force"
+        # "gluster volume replace-brick #{node['glusterfs']['server']['volume']} #{old_instnace}:/gluster/dev/md0/brick #{new_instance}:/gluster/dev/md0/brick commit force"
+        # "gluster peer detach #{old_instnace}"
+        # EOH
+        # end
+        # end
+        # end
+      end
+    else
+      node['deployment']['servers'][$nodeclass].each_pair do |name, data|
+        execute "gluster peer probe #{data['private_ip_address']}" do
+          not_if { data['private_ip_address'] == node['ipaddress'] }
+        end
+      end
+    end
+
+  else
+    Chef::Log.info("Unsupported platform #{node['platform']}")
+end

data/cookbooks/mu-glusterfs/templates/default/mu-gluster-client.erb

@@ -0,0 +1,71 @@
+#!/bin/bash
+# Copyright:: Copyright (c) 2014 eGlobalTech, Inc., all rights reserved
+#
+# Licensed under the BSD-3 license (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License in the root of the project or at
+#
+#     http://egt-labs.com/mu/LICENSE.html
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# mu-gluster-client		Mounts <%= @path %>
+#
+# chkconfig: 2345 55 25
+# description: Mounts <%= @path %>
+#
+
+### BEGIN INIT INFO
+# Provides: mu-cluster-client
+# Required-Start: $local_fs $network $syslog
+# Required-Stop: $local_fs $syslog
+# Default-Start: 2 3 4 5
+# Default-Stop: 0 1 6
+# Short-Description: Mount glusterfs mounts
+# Description:       Mount glusterfs mounts
+### END INIT INFO
+
+# source function library
+. /etc/rc.d/init.d/functions
+
+RETVAL=0
+
+start()
+{
+	if ! grep ":<%= @volume %> <%= @path %> fuse.glusterfs" /etc/mtab > /dev/null;then
+		mount -t glusterfs <%= @servers.map { |server| server.ec2.private_ip_address }.join(',') %>:<%= "#{@volume} #{@path}" %> || exit 1
+		#<%= @servers.map { |server| "mount -t glusterfs #{server.ec2.private_ip_address}:#{@volume} #{@path}" }.join(' || ') %> || exit 1
+	fi
+}
+
+stop()
+{
+	if grep ":<%= @volume %> <%= @path %> fuse.glusterfs" /etc/mtab > /dev/null;then
+		umount <%= @path %>
+	fi
+}
+
+restart() {
+	stop
+	start
+}
+
+case "$1" in
+	start)
+		start
+		;;
+	stop)
+		stop
+		;;
+	restart)
+		restart
+		;;
+	*)
+		echo $"Usage: $0 {start|stop|restart}"
+		RETVAL=2
+esac
+exit $RETVAL

data/cookbooks/mu-glusterfs/templates/default/smb.conf.erb

@@ -0,0 +1,14 @@
+#======================= Global Settings =====================================
+
+# ----------------------- Standalone Server Options ------------------------
+[glusterfs]
+comment = GlusterFS shared over SMB
+path = /
+read only = yes
+guest ok = yes
+browsable = yes
+kernel share modes = No
+vfs objects = glusterfs
+glusterfs:loglevel = 10
+glusterfs:logfile = /var/log/samba/glusterfs-<%= node['glusterfs']['server']['volume'] %>.log
+glusterfs:volume = <%= node['glusterfs']['server']['volume'] %>

data/cookbooks/mu-jenkins/CHANGELOG.md

@@ -0,0 +1,13 @@
+mu-jenkins CHANGELOG
+====================
+
+This file is used to list changes made in each version of the mu-jenkins cookbook.
+
+0.1.0
+-----
+- [your_name] - Initial release of mu-jenkins
+
+- - -
+Check the [Markdown Syntax Guide](http://daringfireball.net/projects/markdown/syntax) for help with Markdown.
+
+The [Github Flavored Markdown page](http://github.github.com/github-flavored-markdown/) describes the differences between markdown on github and standard markdown.

data/cookbooks/mu-jenkins/LICENSE

@@ -0,0 +1,37 @@
+Through accessing, reading, or utilizing this software in any manner whatsoever
+or through any means whatsoever, whether the access, reading or use is either
+solely looking at this software or this software has been integrated into any
+derivative work, the party accessing,  reading, or utilizing the software
+directly or indirectly agrees to abide by the following license. 
+
+The eGlobalTech Cloud Automation Platform is the Copyright (c) 2014 of Global
+Tech Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+may be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+Global Tech, Inc. is the co-owner of any derivative works created with this
+software. 
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+

data/cookbooks/mu-jenkins/README.md

@@ -0,0 +1,105 @@
+mu-jenkins Cookbook
+===================
+This cookbook creates a working Jenkins installation.  It can be deployed on a standalone node (see demo/jenkins.yaml) or as a Jenkins server on the mu-master itself.  
+
+Requirements
+------------
+This is a wrapper cookbook that is meant to be run after a Jenkins install using the Jenkins community cookbook. The recipe uses some groovy scripts to manage jenkins authentication from chef itself, and create an additional administrave Jenkins user for interactive work.
+
+A jenkins vault must be present before invoking.  Two items are required
+-  A users item containing passwords for each user enumerated in the default.jenkins_users attribute (see below).  The mu-user password is required, as we need at least one interactive Jenkins user
+-  An admin item containing a public and private keypair that will be used by chef to authenticate to Jenkins after disabling anonymous authentication, and a username for this user
+
+A third optional ssh item is used to store a keypair used by Jenkins to SSH to other nodes, to allow Jenkins to run code locally as part of a Jenkins job.
+
+Create the vault items along these lines:
+
+admin:
+```
+#!/usr/local/ruby-current/bin/ruby
+require "openssl"
+require 'net/ssh'
+key = OpenSSL::PKey::RSA.new 2048
+public_key = "#{key.public_key.ssh_type} #{[key.public_key.to_blob].pack('m0')}"
+vault_opts="--mode client -u mu -F json"
+vault_cmd = "knife vault create jenkins admin '{ \"public_key\":\"#{public_key}\", \"private_key\":\"#{key.to_pem.chomp!.gsub(/\n/, "\\n")}\", \"username\": \"master_user\" }' #{vault_opts} --search name:MU-MASTER"
+exec vault_cmd
+```
+
+users:
+```knife vault create jenkins users '{"mu_user_password":"feefiefoefum"}'  --mode client -F json -u mu --search name:MU-MASTER```
+
+
+#### packages
+- `java` - jenkins needs Java to run
+- `jenkins` - mu-jenkins needs jenkins to actually be installed
+
+Attributes
+----------
+Some basic attributes on the java install and node address, plus Jenkins specifics:
+
+#### mu-jenkins::default
+<table>
+  <tr>
+    <th>Key</th>
+    <th>Type</th>
+    <th>Description</th>
+    <th>Default</th>
+  </tr>
+  <tr>
+    <td><tt>default.jenkins_users</tt></td>
+    <td>Hash</td>
+    <td>Jenkins users to create with their properties (excepting password) and a single vault to retrieve creds from</td>
+    <td><tt>:user_name => "mu_user", :fullname => "Mu-Demo-User", :email => "mu-developers@googlegroups.com", :vault => "jenkins", :vault_item => "users"}</tt></td>
+  </tr>
+  <tr>
+    <td><tt>default.jenkins_ssh_urls</tt></td>
+    <td>Array</td>
+    <td>IP addresses / DNS names of nodes Jenkins will SSH into</td>
+    <td><tt>[node[:ipaddress]]</tt></td>
+  </tr>
+  <tr>
+    <td><tt>default.jenkins_plugins</tt></td>
+    <td>Whitespace string</td>
+    <td>plugins to install</td>
+    <td><tt>%w{github ssh deploy}</tt></td>
+  </tr>
+  <tr>
+    <td><tt>default.jenkins_ssh_vault</tt></td>
+    <td>Hash</td>
+    <td>Preexisting vault containing a public private keypair that will be used to SSH to other nodes</td>
+    <td><tt>:vault => "jenkins", :item => "ssh"</tt></td>
+  </tr>
+  <tr>
+    <td><tt>default.jenkins_admin_vault</tt></td>
+    <td>Hash</td>
+    <td>Preexisting vault containing a public private keypair used by Chef to authenticate to Jenkins. This also include the username of the Jenkins user</td>
+    <td><tt>:vault => "jenkins", :item => "admin"</tt></td>
+  </tr>
+</table>
+
+Usage
+-----
+#### mu-jenkins::default
+This cookbook can run in a standalone mode which creates a basic Jenkins install on a target node, or a mu-master mode which creates a Jenkins server on a mu master.
+
+In either case the runlist will look like:
+```    run_list:
+    - recipe[java]
+    - recipe[jenkins::master]
+    - recipe[mu-jenkins]
+```
+
+In the mu-master mode the cookbook is invoked with the role[mu-master-jenkins], which adds some attributes to trigger the jenkins-apache recipe, which places Jenkins behind a mu-master apache reverse proxy:
+
+    chef-client -l info -o recipe[java],recipe[jenkins::master],recipe[mu-jenkins]
+
+
+Contributing
+------------
+Usual Cloudamatic process via pull request
+
+
+License and Authors
+-------------------
+Authors: Ami Rahav, Robert Patt-Corner

data/cookbooks/mu-jenkins/attributes/default.rb

@@ -0,0 +1,42 @@
+
+default['jenkins_users'] = [
+#  {:user_name => "mu_user", :fullname => "Mu-Demo-User", :email => ENV['MU_ADMIN_EMAIL'], :vault => "jenkins", :vault_item => "users"}
+]
+
+default['jenkins_ssh_urls'] = [node['ipaddress']]
+default['jenkins_plugins'] = %w{
+  token-macro git github deploy ldap scm-api git-client active-directory
+  ansicolor matrix-auth matrix-project workflow-scm-step junit workflow-api 
+  workflow-step-api ssh credentials ssh-credentials plain-credentials mailer
+  display-url-api structs script-security jackson2-api
+}
+
+default['jenkins_ports_direct'] = %w{8080 443}
+default['jenkins']['master']['jenkins_args'] = "" if default['jenkins']['master']['jenkins_args'].nil?
+jenkins_args = "" if node['jenkins']['master']['jenkins_args'].nil?
+override['jenkins']['master']['jenkins_args'] = "#{jenkins_args} --prefix=/jenkins"
+default['jenkins']['master']['jvm_options'] = '-Xmx1024m -Djenkins.install.runSetupWizard=false'
+
+
+alpn_version = '8.1.11.v20170118'
+default['jenkins']['alpn']['version'] = alpn_version
+default['jenkins']['alpn']['download_link'] = "http://central.maven.org/maven2/org/mortbay/jetty/alpn/alpn-boot/#{alpn_version}/alpn-boot-#{alpn_version}.jar"
+
+# This isn't really true, but the Java libraries lose their minds over
+# self-signed SSL certs like the one you'll usually find on
+# https://#{$MU_CFG['public_address']}/jenkins (the real URL)
+default['jenkins']['master']['endpoint'] = "http://localhost:8080/jenkins"
+default['jenkins_ssh_vault'] = {
+    :vault => "jenkins", :item => "ssh"
+}
+
+default['jenkins_admin_vault'] = {
+    :vault => "jenkins", :item => "admin"
+}
+
+override['java']['jdk_version'] = 8
+override['java']['flavor'] = 'oracle'
+override['java']['jdk']['8']['x86_64']['url'] = 'http://download.oracle.com/otn-pub/java/jdk/8u131-b11/d54c1d3a095b4ff2b6607d096fa80163/jdk-8u131-linux-x64.tar.gz'
+override['java']['jdk']['8']['x86_64']['checksum'] = '75b2cb2249710d822a60f83e28860053'
+override["java"]["oracle"]["accept_oracle_download_terms"] = true
+override['java']['oracle']['jce']['enabled'] = true