cloud-mu 1.9.0.pre.beta

data/cookbooks/mu-master/templates/default/openssl.cnf.erb

@@ -0,0 +1,354 @@
+# OpenSSL example configuration file.
+# This is mostly being used for generation of certificate requests.
+#
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME                    = .
+RANDFILE                = $ENV::HOME/.rnd
+
+# Extra OBJECT IDENTIFIER info:
+#oid_file               = $ENV::HOME/.oid
+oid_section             = new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions            =
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+####################################################################
+[ ca ]
+default_ca      = CA_default            # The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir             = <%= @mu_ssl_dir %>    # Where everything is kept
+certs           = $dir                  # Where the issued certs are kept
+crl_dir         = $dir                  # Where the issued crl are kept
+database        = $dir/index.txt        # database index file.
+#unique_subject = no                    # Set to 'no' to allow creation of
+                                        # several ctificates with same subject.
+new_certs_dir   = $dir                  # default place for new certs.
+
+certificate     = $dir/Mu_CA.pem        # The CA certificate
+serial          = $dir/serial           # The current serial number
+crlnumber       = $dir/crlnumber        # the current crl number
+                                        # must be commented out to leave a V1 CRL
+crl             = $dir/crl.pem          # The current CRL
+private_key     = $dir/Mu_CA.key        # The private key
+RANDFILE        = /etc/pki/CA/private/.rand    # private random number file
+
+x509_extensions = usr_cert              # The extentions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt        = ca_default            # Subject Name options
+cert_opt        = ca_default            # Certificate field options
+
+# Extension copying option: use with caution.
+# copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions        = crl_ext
+
+default_days    = 365                   # how long to certify for
+default_crl_days= 30                    # how long before next CRL
+default_md      = default               # use public key default MD
+preserve        = no                    # keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy          = policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName             = match
+stateOrProvinceName     = match
+organizationName        = match
+organizationalUnitName  = optional
+commonName              = supplied
+emailAddress            = optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName             = optional
+stateOrProvinceName     = optional
+localityName            = optional
+organizationName        = optional
+organizationalUnitName  = optional
+commonName              = supplied
+emailAddress            = optional
+
+####################################################################
+[ req ]
+default_bits            = 4096
+default_md              = sha512
+default_keyfile         = MU_CA.key
+distinguished_name      = req_distinguished_name
+attributes              = req_attributes
+x509_extensions = v3_ca # The extentions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix   : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName                     = Country Name (2 letter code)
+countryName_default             = US
+countryName_min                 = 2
+countryName_max                 = 2
+
+stateOrProvinceName             = State or Province Name (full name)
+#stateOrProvinceName_default    = Default Province
+
+localityName                    = Locality Name (eg, city)
+localityName_default    = Default City
+
+0.organizationName              = Organization Name (eg, company)
+0.organizationName_default      = Default Company Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName             = Second Organization Name (eg, company)
+#1.organizationName_default     = World Wide Web Pty Ltd
+
+organizationalUnitName          = Organizational Unit Name (eg, section)
+#organizationalUnitName_default =
+
+commonName                      = Common Name (eg, your name or your server\'s hostname)
+commonName_max                  = 64
+
+emailAddress                    = Email Address
+emailAddress_max                = 64
+
+# SET-ex3                       = SET extension number 3
+
+[ req_attributes ]
+challengePassword               = A challenge password
+challengePassword_min           = 4
+challengePassword_max           = 20
+
+unstructuredName                = An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType                    = server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment                       = "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl              = http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+subjectAltName = <%= @alt_names.delete_if {|x| x.nil? or x == "" }.map { |name| (name.match(/^\d+\.\d+\.\d+\.\d+$/) ? "IP" : "DNS")+":"+name if !name.nil? }.join(",") %>
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+subjectAltName = <%= @alt_names.delete_if {|x| x.nil? or x == "" }.map { |name| (name.match(/^\d+\.\d+\.\d+\.\d+$/) ? "IP" : "DNS")+":"+name }.join(",") %>
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+# This is what PKIX recommends but some broken software chokes on critical
+# extensions.
+#basicConstraints = critical,CA:true
+# So we do this instead.
+basicConstraints = CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType                    = server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment                       = "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl              = http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1       # the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir             = ./demoCA              # TSA root directory
+serial          = $dir/tsaserial        # The current serial number (mandatory)
+crypto_device   = builtin               # OpenSSL engine to use for signing
+signer_cert     = $dir/tsacert.pem      # The TSA signing certificate
+                                        # (optional)
+certs           = $dir/cacert.pem       # Certificate chain to include in reply
+                                        # (optional)
+signer_key      = $dir/private/tsakey.pem # The TSA private key (optional)
+
+default_policy  = tsa_policy1           # Policy if request did not specify it
+                                        # (optional)
+other_policies  = tsa_policy2, tsa_policy3      # acceptable policies (optional)
+digests         = md5, sha1             # Acceptable message digests (mandatory)
+accuracy        = secs:1, millisecs:500, microsecs:100  # (optional)
+clock_precision_digits  = 0     # number of digits after dot. (optional)
+ordering                = yes   # Is ordering defined for timestamps?
+                                # (optional, default: no)
+tsa_name                = yes   # Must the TSA name be included in the reply?
+                                # (optional, default: no)
+ess_cert_id_chain       = no    # Must the ESS cert id chain be included?
+                                # (optional, default: no)
+

data/cookbooks/mu-master/templates/default/sssd.conf.erb

@@ -0,0 +1,44 @@
+[domain/platform-mu]
+autofs_provider = ldap
+cache_credentials = False
+enumerate = True
+ldap_search_base = <%= @base_dn %>
+ldap_user_search_base = <%= @base_dn %>
+ldap_group_search_base = <%= @base_dn %>
+id_provider = ldap
+auth_provider = ldap
+access_provider = permit
+chpass_provider = ldap
+sudo_provider = ldap
+ldap_uri = <%= @dcs.map { |dc| "ldaps://"+dc+"/" }.join(",") %>
+ldap_tls_reqcert = allow
+ldap_id_use_start_tls = True
+ldap_tls_cacertdir = /etc/openldap/cacerts
+ldap_user_object_class = inetorgperson
+ldap_user_uid_number = employeeNumber
+ldap_user_gid_number = departmentNumber
+ldap_group_objectclass = posixGroup
+ldap_group_member = memberUid
+ldap_group_gid_number = gidNumber
+
+[sssd]
+services = nss, pam
+config_file_version = 2
+domains = platform-mu
+
+[nss]
+nss_filter_groups = root
+nss_filter_users = root, apache, postfix, bin, daemon, sshd, ftp, clam, centos, mysql, clam, saslauth, dbus, nagios, rpc, nscd
+override_homedir = /home/%u
+default_shell = /bin/bash
+
+[pam]
+pam_verbosity = 2
+
+[sudo]
+
+[ssh]
+
+[pac]
+
+[ifp]

data/cookbooks/mu-master/templates/default/web_app.conf.erb

@@ -0,0 +1,90 @@
+<VirtualHost *:<%= @params[:server_port] || node['apache']['listen'].first %>>
+  ServerName <%= @params[:server_name] %>
+  ServerAlias <% @params[:server_aliases].each do |a| %><%= a %> <% end %>
+  FileETag -INode
+  DocumentRoot <%= @params[:docroot] %>
+  RewriteEngine On
+  RewriteRule ^/(nagios|jenkins|scratchpad)$ https://%{HTTP_HOST}/$1/ [R=301,NC,L]
+
+<% if @params[:server_port].to_s.match(/443$/) %>
+  SSLEngine On
+  SSLCertificateFile <%= $MU_CFG['ssl']['cert'] %>
+  SSLCertificateKeyFile <%= $MU_CFG['ssl']['key'] %>
+<% if $MU_CFG['ssl'].has_key?("chain") and !$MU_CFG['ssl']['chain'].empty? %>
+  SSLCertificateChainFile <%= $MU_CFG['ssl']['chain'] %>
+<% end %>
+  SSLProxyEngine on
+  <Proxy *>
+<% if node['apache']['version'] == "2.2" %>
+    Order allow,deny
+    Allow from all
+<% elsif node['apache']['version'] == "2.4" %>
+    Require all granted
+<% end %>
+  </Proxy>
+
+  ProxyPreserveHost on
+  AllowEncodedSlashes off
+  
+  # Scratchpad, the Mu secret-sharer
+  ProxyPass /scratchpad https://localhost:2260/scratchpad
+  ProxyPassReverse /scratchpad https://localhost:2260/scratchpad
+
+  # Jenkins CI web interface
+  ProxyPass /jenkins http://localhost:8080/jenkins
+  ProxyPassReverse /jenkins http://localhost:8080/jenkins
+
+  # Nagios web UI
+  ProxyPass /nagios/ https://localhost:8443/nagios/
+  ProxyPassReverse /nagios/ https://localhost:8443/nagios/
+
+  ProxyPass /cloudamatic.png !
+  ProxyPass /docs/ !
+  ProxyPass /index.html !
+
+  # Everything else should go to the Chef API endpoint
+  ProxyPass / https://localhost:7443/
+  ProxyPassReverse / https://localhost:7443/
+
+  RequestHeader set X-Forwarded-Proto "https"
+
+<% else %>
+  RewriteRule ^/(nagios|jenkins|scratchpad)/(.*) https://%{HTTP_HOST}/$1/$2 [R=301,NC,L]
+<% end %>
+
+	RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
+	RewriteRule .* - [F]
+
+  <Directory <%= @params[:docroot] %>>
+    Options <%= [@params[:directory_options] || "FollowSymLinks" ].flatten.join " " %>
+    AllowOverride <%= [@params[:allow_override] || "None" ].flatten.join " " %>
+<% if node['apache']['version'] == "2.2" %>
+    Order allow,deny
+    Allow from all
+<% elsif node['apache']['version'] == "2.4" %>
+	Require all granted
+<% end %>
+  </Directory>
+
+  <Directory />
+    Options FollowSymLinks
+    AllowOverride None
+  </Directory>
+
+  <Location /server-status>
+    SetHandler server-status
+<% if node['apache']['version'] == "2.2" %>
+    Order Deny,Allow
+    Deny from all
+    Allow from 127.0.0.1
+<% elsif node['apache']['version'] == "2.4" %>
+    Require host 127.0.0.1
+<% end %>
+  </Location>
+
+
+  <% if @params[:directory_index] -%>
+  DirectoryIndex <%= [@params[:directory_index]].flatten.join " " %>
+  <% end -%>
+
+</VirtualHost>

data/cookbooks/mu-mongo/CHANGELOG.md

@@ -0,0 +1,13 @@
+fema-app-hosting CHANGELOG
+==========================
+
+This file is used to list changes made in each version of the fema-app-hosting cookbook.
+
+0.1.0
+-----
+- [your_name] - Initial release of fema-app-hosting
+
+- - -
+Check the [Markdown Syntax Guide](http://daringfireball.net/projects/markdown/syntax) for help with Markdown.
+
+The [Github Flavored Markdown page](http://github.github.com/github-flavored-markdown/) describes the differences between markdown on github and standard markdown.

data/cookbooks/mu-mongo/LICENSE

@@ -0,0 +1,37 @@
+Through accessing, reading, or utilizing this software in any manner whatsoever
+or through any means whatsoever, whether the access, reading or use is either
+solely looking at this software or this software has been integrated into any
+derivative work, the party accessing,  reading, or utilizing the software
+directly or indirectly agrees to abide by the following license. 
+
+The eGlobalTech Cloud Automation Platform is the Copyright (c) 2014 of Global
+Tech Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+may be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+Global Tech, Inc. is the co-owner of any derivative works created with this
+software. 
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+

data/cookbooks/mu-mongo/README.md

@@ -0,0 +1,5 @@
+fema-app-hosting Cookbook
+=========================
+This is a mongo db cookbook for mu
+
+TODO: Improve Readme.md

data/cookbooks/mu-mongo/attributes/default.rb

@@ -0,0 +1,22 @@
+mongo_data = {"dev" => "/dev/xvdg", "dir" => "/mongo_data"}
+mongo_logs = {"dev" => "/dev/xvdh", "dir" => "/mongo_logs"}
+mongo_journal = {"dev" => "/dev/xvdf", "dir" => "/mongo_data/journal"}
+
+default['application_attributes']['mongo_dirs'] = [mongo_data, mongo_logs, mongo_journal]
+
+default['mongodb']['config']['dbpath'] = "/mongo_data"
+default['mongodb']['log_dir'] = mongo_logs['dir']
+default['mongodb']['config']['logpath'] = "#{node['mongodb']['log_dir']}/mongo.log"
+default['mongodb']['cluster_name'] = "fema"
+default['mongodb']['config']['keyFile'] = "/mongo_data/keyfile"
+default['mongodb']['config']['auth'] = true
+default['mongodb']['config']['setParameter'] = "enableLocalhostAuthBypass=1"
+default['mongodb']['admin'] = "admin"
+default['mongodb']['auto_configure']['replicaset'] = false
+default['mongodb']['mu_db_name'] = "Mu"
+default['mongodb']['package_version'] = "2.6.6-1"
+
+default['mongodb']['auth'] = {
+    'data_bag' => 'mongodb',
+    'data_bag_item' => "admin_user"
+}

data/cookbooks/mu-mongo/files/default/keyfile

@@ -0,0 +1,16 @@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data/cookbooks/mu-mongo/files/default/remove_nodes.js

@@ -0,0 +1,5 @@
+rs.status().members.forEach(function (status) {
+    if (status.health === 0) {
+        rs.remove(status.name);
+    }
+});

data/cookbooks/mu-mongo/metadata.rb

@@ -0,0 +1,17 @@
+name 'mu-mongo'
+maintainer 'John Stange'
+maintainer_email 'john.stange@eglobaltech.com'
+license 'BSD-3-Clause'
+description 'Installs/Configures a Mongo DB cluster'
+long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+source_url 'https://github.com/cloudamatic/mu'
+issues_url 'https://github.com/cloudamatic/mu/issues'
+chef_version '>= 12.1' if respond_to?(:chef_version)
+version '0.5.0'
+
+%w( centos ).each do |os|
+	supports os
+end
+
+depends 'mongodb', '~> 0.16.2'
+depends 'chef-vault', '~> 3.1.1'