eid-ops/fe-test-common/overlay/etc/hiera/data/group.yaml

227 lines
8 KiB
YAML

---
sunet_frontend:
load_balancer:
api_imagetag: 'staging'
exabgp_imagetag: 'stable'
port80_acme_c_backend: 'letsencrypt_acme-c.sunet.se'
static_backends:
letsencrypt_acme-c.sunet.se.se:
- '89.47.184.10' # note: port 80
peers:
se-tug-rs-2.sunet.se:
as: '65434'
remote_ip: '192.36.171.71'
se-tug-rs-2.sunet.se_v6:
as: '65434'
remote_ip: '2001:6b0:8:7::71'
se-sthb-rs-1.sunet.se:
as: '65434'
remote_ip: '192.36.171.130'
se-sthb-rs-1.sunet.se_v6:
as: '65434'
remote_ip: '2001:6b0:8:1::130'
se-sto4-rs-1.sunet.se:
as: '64578'
remote_ip: 89.46.20.185
se-sto4-rs-1.sunet.se_v6:
as: '64578'
remote_ip: 2001:6b0:6c::3aa
se-sto3-rs-1.sunet.se:
as: '64578'
remote_ip: 89.45.236.202
se-sto3-rs-1.sunet.se_v6:
as: '64578'
remote_ip: 2001:6b0:40::336
websites2:
'connectortst':
site_name: 'test.connector.eidas.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.128', '2001:6b0:65:2::128']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.129', '2001:6b0:65:2::129']
backends:
default:
'connector-test-sto3-1.komreg.net':
ips: ['89.45.236.201']
server_args: 'ssl verify required ca-file /etc/ssl/certs/infra.crt cookie ect1'
'connector-test-sto3-2.komreg.net':
ips: ['89.45.237.40']
server_args: 'ssl verify required ca-file /etc/ssl/certs/infra.crt cookie ect1'
'connector-test-sto3-3.komreg.net':
ips: ['89.45.237.212']
server_args: 'ssl verify required ca-file /etc/ssl/certs/infra.crt cookie ect1'
#'eidas-connector-1.test.sveidas.se':
# ips: ['89.45.236.47']
#'eidas-connector-2.test.sveidas.se':
# ips: ['89.45.237.117']
# server_args: 'ssl check verify none cookie ect2'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
haproxy_volumes:
- "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"
'testtest':
site_name: 'test.test.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.130', '2001:6b0:65:2::130']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.131', '2001:6b0:65:2::131']
backends:
default:
'test-1.test.sveidas.se':
ips: ['89.45.237.55']
server_args: 'ssl check verify none'
refidp:
'refidp-1.test.sveidas.se':
ips: ['89.45.236.193']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
'proxytest':
site_name: 'test.proxy.eidas.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.132', '2001:6b0:65:2::132']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.133', '2001:6b0:65:2::133']
backends:
default:
'proxy-test-sto3-1.komreg.net':
ips: ['89.45.236.56', '2001:6b0:40::36a']
server_args: 'ssl check verify none cookie p1'
'proxy-test-sto3-2.komreg.net':
ips: ['89.45.237.141', '2001:6b0:40::20c']
server_args: 'ssl check verify none cookie p2'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
'mdeidastest':
site_name: 'test.md.eidas.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.134', '2001:6b0:65:2::134']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.135', '2001:6b0:65:2::135']
backends:
default:
'eupub-test-1.komreg.net':
ips: ['89.45.236.252']
server_args: 'ssl check verify none'
'eupub-test-2.komreg.net':
ips: ['89.45.237.8']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
'mdtest':
site_name: 'test.md.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.136', '2001:6b0:65:2::136']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.137', '2001:6b0:65:2::137']
backends:
default:
'natpub-test-1.komreg.net':
ips: ['89.45.237.190']
server_args: 'ssl check verify none'
'natpub-test-2.komreg.net':
ips: ['89.45.237.23']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
'validatortst':
site_name: 'test.validator.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.138', '2001:6b0:65:2::138']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.139', '2001:6b0:65:2::139']
backends:
default:
'validator-test-1.komreg.net':
ips: ['89.45.237.45']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
'idmtest':
site_name: 'test.idm.eidas.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.140', '2001:6b0:65:2::140']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.141', '2001:6b0:65:2::141']
backends:
default:
'idm-sto1-test-app-1.komreg.net':
ips: ['89.47.185.124']
server_args: 'ssl check verify none'
'idm-sto3-test-app-3.komreg.net':
ips: ['89.45.237.180']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'
'demwtest':
site_name: 'test.demw.eidas.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.142', '2001:6b0:65:2::142']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.143', '2001:6b0:65:2::143']
backends:
default:
'demw-1.test.sveidas.se':
ips: ['89.45.236.166']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eidas-haproxy
haproxy_imagetag: 'test'
frontendtools_image: docker.sunet.se/eidas-frontend-tools
frontendtools_imagetag: 'staging'