AIRAVATA-2335 SEAgrid PGA deployment to Jetstream Note: some of the pga variables are encrypted
Project: http://git-wip-us.apache.org/repos/asf/airavata/repo Commit: http://git-wip-us.apache.org/repos/asf/airavata/commit/2a41071d Tree: http://git-wip-us.apache.org/repos/asf/airavata/tree/2a41071d Diff: http://git-wip-us.apache.org/repos/asf/airavata/diff/2a41071d Branch: refs/heads/develop Commit: 2a41071dda3916c8dbfd5269164fa6b02df7b0f8 Parents: 852a4fe Author: Marcus Christie <[email protected]> Authored: Wed Mar 8 12:11:07 2017 -0500 Committer: Marcus Christie <[email protected]> Committed: Wed Mar 8 12:11:07 2017 -0500 ---------------------------------------------------------------------- dev-tools/ansible/.gitignore | 1 + .../testing-0.17/group_vars/pga/vars.yml | 31 ++++++++++++++++++++ .../testing-0.17/group_vars/pga/vault.yml | 18 ++++++++++++ .../ansible/inventories/testing-0.17/hosts | 3 ++ dev-tools/ansible/pga.yml | 8 +++++ .../roles/pga/templates/pga_config.php.j2 | 8 +++++ 6 files changed, 69 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/airavata/blob/2a41071d/dev-tools/ansible/.gitignore ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/.gitignore b/dev-tools/ansible/.gitignore index a8b42eb..982f5b2 100644 --- a/dev-tools/ansible/.gitignore +++ b/dev-tools/ansible/.gitignore @@ -1 +1,2 @@ *.retry +vault-password.txt http://git-wip-us.apache.org/repos/asf/airavata/blob/2a41071d/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vars.yml ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vars.yml b/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vars.yml new file mode 100644 index 0000000..dffd691 --- /dev/null +++ b/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vars.yml @@ -0,0 +1,31 @@ +--- +pga_repo: "https://github.com/apache/airavata-php-gateway.git" +pga_git_branch: "develop" +pga_user: "pga" +pga_group: "pga" +doc_root_dir: "/var/www/html/php-gateway" +user_data_dir: "/var/www/user_data" + +## WSO2 IS related variables +tenant_domain: "prod.seagrid" +admin_username: "admin" +admin_password: "{{ vault_admin_password }}" +oauth_client_key: "{{ vault_oauth_client_key }}" +oauth_client_secret: "{{ vault_oauth_client_secret }}" + +## Airavata Client related variables +#airavata_server: "tls://gw77.iu.xsede.org" +airavata_server: "{{ groups['api-orch'][0] }}" +airavata_port: "8930" +gateway_id: "seagrid" +# relative to document root dir +experiment_data_dir: "{{ user_data_dir }}" +# TODO: fix this +gateway_data_store_resource_id: "js-170-103.jetstream-cloud.org_6497a464-3121-4b64-a7cb-d195b0a26c19" + +## Portal related variables +super_admin_portal: "false" +admin_emails: "'[email protected]'" +portal_email_username: "[email protected]" +portal_email_password: "{{ vault_portal_email_password }}" +... http://git-wip-us.apache.org/repos/asf/airavata/blob/2a41071d/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vault.yml ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vault.yml b/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vault.yml new file mode 100644 index 0000000..b253227 --- /dev/null +++ b/dev-tools/ansible/inventories/testing-0.17/group_vars/pga/vault.yml @@ -0,0 +1,18 @@ +$ANSIBLE_VAULT;1.1;AES256 +66333335376433663761356636313739303836383431366135633735663262366262663737613936 +6238613036636365653530353538373031623562373335300a316462306231653531613330303030 +61383138343832616162353239303331663164326635336566663666316232366562616633316139 +6365666632373662340a666238353135396239373062383331386137353134336539386636623237 +37326237326233303437386666646138666530663766376238366263653730353938363064663336 +62336662643831653833633835653666363134303830633834336162383265666131303434346466 +32323937663766323632396631616264326232613361333834303031636239333435343563396366 +35643766376466613535383938623038653634303035323065363031303032303835343866643330 +37303462333839313265353063613937623431336635623839386137353433396136623162333233 +62633536616437376366663566393430626533323232383733353761643738376366316631353562 +35366133373866393737653665326566353963643138633630393838643363633562623430373132 +62383531356430646633323933633130623935653139363566326232653965333764363238333137 +30663863363566353035393437316135303265643165353034326664656336623930613632376237 +62393231336539656636636530643863323834363130636238323732373738316265306665643962 +62333437313064623566386438636136613461373332343462613733623736666338333064346661 +62643035636435663135613437383036663034363536646634633966666633643033303634633639 +63396139343037353433613936333962366130333336333231353836353161636365 http://git-wip-us.apache.org/repos/asf/airavata/blob/2a41071d/dev-tools/ansible/inventories/testing-0.17/hosts ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/inventories/testing-0.17/hosts b/dev-tools/ansible/inventories/testing-0.17/hosts index b392006..27f378f 100644 --- a/dev-tools/ansible/inventories/testing-0.17/hosts +++ b/dev-tools/ansible/inventories/testing-0.17/hosts @@ -18,3 +18,6 @@ # needs to be here as a workaround [registry] 149.165.168.5 ansible_user=centos + +[pga] +149.165.156.102 ansible_user=centos http://git-wip-us.apache.org/repos/asf/airavata/blob/2a41071d/dev-tools/ansible/pga.yml ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/pga.yml b/dev-tools/ansible/pga.yml new file mode 100644 index 0000000..88edadc --- /dev/null +++ b/dev-tools/ansible/pga.yml @@ -0,0 +1,8 @@ +--- +- hosts: pga + tags: pga + roles: + - env_setup + - pga + +... http://git-wip-us.apache.org/repos/asf/airavata/blob/2a41071d/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 b/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 index c71308d..aa320a7 100644 --- a/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 +++ b/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 @@ -24,6 +24,14 @@ return array( 'user-role-name' => 'gateway-user', /** + * Initial user role. This is the initial user role assigned to a new + * user. Set this to one of the three roles above to automatically + * grant new users that role, or set to some other role ('user-pending') + * to require admin approval before users have access. + */ + 'initial-role-name' => 'user-pending', + + /** * Tenant Domain */ 'tenant-domain' => '{{ tenant_domain }}',
