fhcap-cli 0.3.0

data/templates/cluster/aws/core-3node.json.erb

@@ -0,0 +1,106 @@
+{
+  "domain": "<%= config[:domain] %>",
+  "subnets": {
+    "1a": {
+      "cidr": "64/26",
+      "availability_zone": "1a"
+    },
+    "1b": {
+      "cidr": "128/26",
+      "availability_zone": "1b"
+    },
+    "1c": {
+      "cidr": "192/26",
+      "availability_zone": "1c"
+    }
+  },
+  "security_groups": {
+    "<%= config[:environment_name] %>-studio-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 80,
+          "end": 80,
+          "sources": ["0.0.0.0/0"]
+        },
+        {
+          "protocols": ["tcp"],
+          "start": 443,
+          "end": 443,
+          "sources": ["0.0.0.0/0"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>": {
+      "authorize_ingress": [
+        {
+          "protocols": ["all"],
+          "start": 0,
+          "end": 65535,
+          "groups": ["<%= config[:environment_name] %>", "<%= config[:environment_name] %>-studio-lb"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-git": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 22,
+          "end": 22,
+          "sources": ["0.0.0.0/0"]
+        }
+      ]
+    }
+  },
+  "load_balancers": {
+    "studio": {
+      "security_groups": ["<%= config[:environment_name] %>-studio-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internet-facing",
+      "listeners": [
+        {
+          "port": 80,
+          "protocol": "http",
+          "instance_port": 80,
+          "instance_protocol": "http"
+        },
+        {
+          "port": 443,
+          "protocol": "https",
+          "instance_port": 80,
+          "instance_protocol": "http",
+          "server_certificate": ""
+        }
+      ]
+    }
+  },
+  "instances": {
+    "node1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>", "<%= config[:environment_name] %>-git"],
+        "private_ip_address": "",
+        "subnet": "1a"
+      },
+      "load_balancers": ["studio", "scm", "messaging", "metrics"],
+      "run_list": ["role[mount_data_volumes]", "role[platform_mongo_server]", "role[rabbitmq_server]", "role[app_server]", "role[fh-scm]", "role[fh-messaging]", "role[fh-metrics]", "role[fh-stats]", "recipe[feedhenry_common::fhctl]"]
+    },
+    "node2": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>", "<%= config[:environment_name] %>-git"],
+        "private_ip_address": "",
+        "subnet": "1b"
+      },
+      "load_balancers": ["studio", "scm", "messaging", "metrics"],
+      "run_list": ["role[mount_data_volumes]", "role[platform_mongo_server]", "role[rabbitmq_server]", "role[app_server]", "role[fh-scm]", "role[fh-messaging]", "role[fh-metrics]", "recipe[feedhenry_common::fhctl]"]
+    },
+    "mgt1": {
+      "aws": {
+        "instance_type": "m3.medium",
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>", "<%= config[:environment_name] %>-git"],
+        "private_ip_address": "",
+        "subnet": "1c"
+      },
+      "run_list": ["role[platform_mongo_server]", "role[mysql_server]", "role[gitlab-shell_server]", "role[management_server]", "recipe[feedhenry_common::fhctl]"]
+    }
+  }
+}

data/templates/cluster/aws/core-small-9node.json.erb

@@ -0,0 +1,333 @@
+{
+  "domain": "<%= config[:domain] %>",
+  "subnets": {
+    "1a": {
+      "cidr": "64/26",
+      "availability_zone": "1a"
+    },
+    "1b": {
+      "cidr": "128/26",
+      "availability_zone": "1b"
+    },
+    "1c": {
+      "cidr": "192/26",
+      "availability_zone": "1c"
+    }
+  },
+  "security_groups": {
+    "<%= config[:environment_name] %>-studio-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 80,
+          "end": 80,
+          "sources": ["0.0.0.0/0"]
+        },
+        {
+          "protocols": ["tcp"],
+          "start": 443,
+          "end": 443,
+          "sources": ["0.0.0.0/0"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>": {
+      "authorize_ingress": [
+        {
+          "protocols": ["all"],
+          "start": 0,
+          "end": 65535,
+          "groups": ["core", "core-studio-lb"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-git": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 22,
+          "end": 22,
+          "sources": ["0.0.0.0/0"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-scm-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 8801,
+          "end": 8801,
+          "groups": ["core"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-sql-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 3306,
+          "end": 3306,
+          "groups": ["core"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-messaging-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 8803,
+          "end": 8803,
+          "groups": ["core"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-metrics-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 8813,
+          "end": 8813,
+          "groups": ["core"]
+        }
+      ]
+    }
+  },
+  "load_balancers": {
+    "studio": {
+      "security_groups": ["<%= config[:environment_name] %>-studio-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internet-facing",
+      "listeners": [
+        {
+          "port": 80,
+          "protocol": "http",
+          "instance_port": 80,
+          "instance_protocol": "http"
+        },
+        {
+          "port": 443,
+          "protocol": "https",
+          "instance_port": 80,
+          "instance_protocol": "http",
+          "server_certificate": ""
+        }
+      ]
+    },
+    "scm": {
+      "security_groups": ["<%= config[:environment_name] %>-scm-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internal",
+      "listeners": [
+        {
+          "port": 8801,
+          "protocol": "tcp",
+          "instance_port": 8801,
+          "instance_protocol": "tcp"
+        }
+      ]
+    },
+    "sql": {
+      "security_groups": ["<%= config[:environment_name] %>-sql-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internal",
+      "listeners": [
+        {
+          "port": 3306,
+          "protocol": "tcp",
+          "instance_port": 3306,
+          "instance_protocol": "tcp"
+        }
+      ]
+    },
+    "messaging": {
+      "security_groups": ["<%= config[:environment_name] %>-messaging-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internal",
+      "listeners": [
+        {
+          "port": 8803,
+          "protocol": "tcp",
+          "instance_port": 8803,
+          "instance_protocol": "tcp"
+        }
+      ]
+    },
+    "metrics": {
+      "security_groups": ["<%= config[:environment_name] %>-metrics-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internal",
+      "listeners": [
+        {
+          "port": 8813,
+          "protocol": "tcp",
+          "instance_port": 8813,
+          "instance_protocol": "tcp"
+        }
+      ]
+    }
+  },
+  "instances": {
+    "app1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>", "<%= config[:environment_name] %>-git"],
+        "private_ip_address": "",
+        "subnet": "1a",
+        "block_device_mappings": [
+          {
+            "device_name": "/dev/sda1",
+            "ebs": {
+              "volume_size": 40,
+              "volume_type": "gp2",
+              "delete_on_termination": false
+            }
+          }
+        ]
+      },
+      "load_balancers": ["studio"],
+      "run_list": ["role[app_server]"]
+    },
+    "app2": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>", "<%= config[:environment_name] %>-git"],
+        "private_ip_address": "",
+        "subnet": "1a",
+        "block_device_mappings": [
+          {
+            "device_name": "/dev/sda1",
+            "ebs": {
+              "volume_size": 40,
+              "volume_type": "gp2",
+              "delete_on_termination": false
+            }
+          }
+        ]
+      },
+      "load_balancers": ["studio"],
+      "run_list": ["role[app_server]"]
+    },
+    "mgt1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>", "<%= config[:environment_name] %>-git"],
+        "private_ip_address": "",
+        "subnet": "1a",
+        "block_device_mappings": [
+          {
+            "device_name": "/dev/sda1",
+            "ebs": {
+              "volume_size": 40,
+              "volume_type": "gp2",
+              "delete_on_termination": false
+            }
+          },
+          {
+            "device_name": "/dev/sdb",
+            "ebs": {
+              "volume_size": 200,
+              "volume_type": "gp2",
+              "delete_on_termination": false,
+              "encrypted": true
+            }
+          }
+        ]
+      },
+      "run_list": ["role[platform_mongo_server]", "role[galera_backup_server]", "role[galera_arbiter_server]", "role[management_server]", "role[mount_data_volumes]", "role[mongo_backup_server]"]
+    },
+    "db1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1a"
+      },
+      "load_balancers": ["sql"],
+      "run_list": ["role[mount_data_volumes]", "role[galera_server]", "role[platform_mongo_server]", "role[rabbitmq_server]"],
+      "source_dest_check": true
+    },
+    "db2": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1a"
+      },
+      "load_balancers": ["sql"],
+      "run_list": ["role[mount_data_volumes]", "role[galera_server]", "role[platform_mongo_server]", "role[rabbitmq_server]"],
+      "source_dest_check": true
+    },
+    "util1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1a"
+      },
+      "load_balancers": ["scm", "messaging", "metrics"],
+      "run_list": ["role[mount_data_volumes]", "role[fh-scm]", "role[fh-messaging]", "role[fh-metrics]", "role[fh-docs]", "role[fh-stats]"],
+      "source_dest_check": true
+    },
+    "util2": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1b"
+      },
+      "load_balancers": ["messaging", "metrics"],
+      "run_list": ["role[mount_data_volumes]", "role[fh-scm]", "role[fh-messaging]", "role[fh-metrics]", "role[fh-stats]"],
+      "source_dest_check": true
+    },
+    "git1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1a",
+        "block_device_mappings": [
+          {
+            "device_name": "/dev/sda1",
+            "ebs": {
+              "volume_size": 40,
+              "volume_type": "gp2",
+              "delete_on_termination": false
+            }
+          },
+          {
+            "device_name": "/dev/sdb",
+            "ebs": {
+              "volume_size": 50,
+              "volume_type": "gp2",
+              "delete_on_termination": false,
+              "encrypted": true
+            }
+          }
+        ]
+      },
+      "load_balancers": ["git"],
+      "run_list": ["role[mount_data_volumes]", "role[gitlab_shell_server"],
+      "source_dest_check": true
+    },
+    "git2": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1b",
+        "block_device_mappings": [
+          {
+            "device_name": "/dev/sda1",
+            "ebs": {
+              "volume_size": 40,
+              "volume_type": "gp2",
+              "delete_on_termination": false
+            }
+          },
+          {
+            "device_name": "/dev/sdb",
+            "ebs": {
+              "volume_size": 50,
+              "volume_type": "gp2",
+              "delete_on_termination": false,
+              "encrypted": true
+            }
+          }
+        ]
+      },
+      "run_list": ["role[mount_data_volumes]", "role[gitlab_shell_server"],
+      "source_dest_check": true
+    }
+  }
+}

data/templates/cluster/aws/mbaas-3node.json.erb

@@ -0,0 +1,116 @@
+{
+  "domain": "<%= config[:domain] %>",
+  "subnets": {
+    "1a": {
+      "cidr": "64/26",
+      "availability_zone": "1a"
+    },
+    "1b": {
+      "cidr": "128/26",
+      "availability_zone": "1b"
+    },
+    "1c": {
+      "cidr": "192/26",
+      "availability_zone": "1c"
+    }
+  },
+  "security_groups": {
+    "<%= config[:environment_name] %>-api-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 80,
+          "end": 80,
+          "sources": ["0.0.0.0/0"]
+        },
+        {
+          "protocols": ["tcp"],
+          "start": 443,
+          "end": 443,
+          "sources": ["0.0.0.0/0"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>": {
+      "authorize_ingress": [
+        {
+          "protocols": ["all"],
+          "start": 0,
+          "end": 65535,
+          "groups": ["<%= config[:environment_name] %>", "<%= config[:environment_name] %>-studio-lb"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-ditch-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 8802,
+          "end": 8802,
+          "groups": ["<%= config[:environment_name] %>"]
+        }
+      ]
+    },
+    "<%= config[:environment_name] %>-stats-lb": {
+      "authorize_ingress": [
+        {
+          "protocols": ["tcp"],
+          "start": 8804,
+          "end": 8804,
+          "groups": ["<%= config[:environment_name] %>"]
+        }
+      ]
+    }
+  },
+  "load_balancers": {
+    "api": {
+      "security_groups": ["<%= config[:environment_name] %>-api-lb"],
+      "subnets": ["1a", "1b"],
+      "scheme": "internet-facing",
+      "listeners": [
+        {
+          "port": 80,
+          "protocol": "http",
+          "instance_port": 80,
+          "instance_protocol": "http"
+        },
+        {
+          "port": 443,
+          "protocol": "https",
+          "instance_port": 80,
+          "instance_protocol": "http",
+          "server_certificate": ""
+        }
+      ]
+    }
+  },
+  "instances": {
+    "ship1": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1a"
+      },
+      "load_balancers": ["api"],
+      "run_list": ["role[mount_data_volumes]", "role[mongo_server]", "role[dyno_server]", "role[fh-ditch]", "recipe[feedhenry_common::fhctl]"]
+    },
+    "ship2": {
+      "aws": {
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1b"
+      },
+      "load_balancers": ["api"],
+      "run_list": ["role[mount_data_volumes]", "role[mongo_server]", "role[dyno_server]", "role[fh-ditch]", "recipe[feedhenry_common::fhctl]"]
+    },
+    "mgt1": {
+      "aws": {
+        "instance_type": "m3.medium",
+        "security_groups": ["ops-admin", "<%= config[:environment_name] %>"],
+        "private_ip_address": "",
+        "subnet": "1c"
+      },
+      "run_list": ["role[mongo_server]", "role[fh-stats]", "role[management_server]"]
+    }
+  }
+}