roles/test-on-localhost.rb

   1 name 'test-on-localhost'
   2 description 'Testing on local machine'
   3
   4 run_list(
   5   'role[mocker]',
   6   'role[node_commons]',
   7   'role[chef_utils]',
   8   'role[nameservice-client]',
   9   'role[ganglia-gmond-ucast-localhost]',
  10   'role[ganglia-gmetad-localhost]',
  11   'role[ganglia-web]',
  12   'role[nagios]',
  13   'role[hadoop-pseudo-distributed-with-security]',
  14   'role[zookeeper-pseudo-replicated-with-security]',
  15   'role[hbase-pseudo-distributed-with-security]',
  16   'role[pig]'
  17 )
  18
  19 #env_run_lists "prod" => ["recipe[apache2]"], "staging" => ["recipe[apache2::staging]"], "_default" => []
  20
  21 default_attributes(
  22   'openldap' => {
  23     'client' => {
  24       'URI' => 'ldap://localhost/',
  25       'BASE' => 'dc=localdomain',
  26       'TLS_CACERT' => '/etc/ssl/certs/cacert.pem',
  27       'TLS_REQCERT' => 'allow',
  28       'TLS_CHECKPEER' => 'yes',
  29       'SASL_MECH' => 'GSSAPI'
  30     },
  31     'nss-ldapd' => {
  32       'uri' => 'ldap://localhost/',
  33       'base' => 'dc=localdomain',
  34       'ssl' => 'start_tls',
  35       'tls_cacertfile' => '/etc/ssl/certs/cacert.pem',
  36       'tls_reqcert' => 'demand'
  37     },
  38     #'ldap_lookup_nameservices' => ['passwd', 'group']
  39   },
  40   'krb5' => {
  41     'libdefaults' => {
  42       'default_realm' => 'LOCALDOMAIN',
  43       # strong crypto
  44       'default_tgs_enctypes' \
  45         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5',
  46       'default_tkt_enctypes' \
  47         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5',
  48       'permitted_enctypes' \
  49         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5'
  50       # or weak crypto for 1.0.x KSSL
  51       #'allow_weak_crypto' => 'true',
  52       #'default_tgs_enctypes' \
  53       #  => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5 des-cbc-crc des-cbc-md5',
  54       #'default_tkt_enctypes' \
  55       #  => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5 des-cbc-crc des-cbc-md5',
  56       #'permitted_enctypes' \
  57       #  => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5 des-cbc-crc des-cbc-md5'
  58     }
  59   },
  60   'ganglia' => {
  61     'trusted_hosts' => ['127.0.0.1'],
  62     'web' => {
  63       #'Allow' => ['from .grid.example.com'],
  64       'AuthType' => 'Kerberos',
  65       'mod_auth_kerb' => {
  66         'KrbAuthRealms' => 'LOCALDOMAIN',
  67         'Krb5Keytab' => '/etc/krb5.keytab'
  68       }
  69     }
  70   },
  71   'nagios' => {
  72     'web' => {
  73       #'Allow' => ['from .grid.example.com'],
  74       'AuthType' => 'Kerberos',
  75       'mod_auth_kerb' => {
  76         'KrbAuthRealms' => 'LOCALDOMAIN',
  77         'Krb5Keytab' => '/etc/krb5.keytab'
  78       }
  79     },
  80     'authorized_for_system_information' => '*',
  81     'authorized_for_configuration_information' => '*',
  82     'authorized_for_system_commands' => '*',
  83     'authorized_for_all_services' => '*',
  84     'authorized_for_all_hosts' => '*',
  85     'authorized_for_all_service_commands' => '*',
  86     'authorized_for_all_host_commands' => '*',
  87     'check_ganglia_metric' => {
  88       'enabled' => true,
  89       'gmetad_host' => 'localhost'
  90     }
  91   },
  92   'zookeeper' => {
  93     'version' => '3.4.5'
  94   },
  95   'hadoop' => {
  96     #'version' => '1.1.2',
  97     'version' => '1.0.4',
  98     'metrics2' => {
  99       'namenode.sink.ganglia.servers' => 'localhost:8649',
 100       'datanode.sink.ganglia.servers' => 'localhost:8649',
 101       'jobtracker.sink.ganglia.servers' => 'localhost:8649',
 102       'tasktracker.sink.ganglia.servers' => 'localhost:8649',
 103       'maptask.sink.ganglia.servers' => 'localhost:8649',
 104       'reducetask.sink.ganglia.servers' => 'localhost:8649'
 105     },
 106     # for 1.0.x only >>
 107     'extra_configs' => {
 108       'core-site.xml' => {
 109         'hadoop.http.authentication.signature.secret' \
 110           => '91d365813d6dd1f4ceafff73f90a9a06'
 111       }
 112     },
 113     'krb5_strong_crypto' => {
 114       'default_tgs_enctypes' \
 115         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5',
 116       'default_tkt_enctypes' \
 117         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5',
 118       'permitted_enctypes' \
 119         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5'
 120     },
 121     'krb5_weak_crypto' => {
 122       'default_tgs_enctypes' \
 123         => 'des-cbc-crc des-cbc-md5',
 124       'default_tkt_enctypes' \
 125         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5 des-cbc-crc des-cbc-md5',
 126       'permitted_enctypes' \
 127         => 'aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 arcfour-hmac-md5 des-cbc-crc des-cbc-md5'
 128     }
 129     # <<
 130   },
 131   'hbase' => {
 132     'version' => '0.94.7'
 133   },
 134   'pig' => {
 135     'version' => '0.11.1'
 136     #'version' => '0.11.0'
 137   }
 138 )
 139
 140 override_attributes(
 141   'ganglia' => {
 142     'trusted_hosts' => ['127.0.0.1'],
 143 =begin
 144     # for TEST
 145     'gmond_conf_type' => 'automatic',
 146     'automatic' => {
 147       #'cast_mode' => 'multi'
 148       'cast_mode' => 'uni'
 149     }
 150 =end
 151   }
 152 )
 153