115 строки
4.2 KiB
YAML
115 строки
4.2 KiB
YAML
credentials:
|
|
# global aad credentials: use only if a common set of aad credentials
|
|
# can access batch, management, storage, and keyvault endpoints.
|
|
aad:
|
|
authority_url: https://login.microsoftonline.com
|
|
directory_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
application_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
auth_key: 01234...
|
|
rsa_private_key_pem: some/path/privatekey.pem
|
|
x509_cert_sha1_thumbprint: 01234...
|
|
user: aad_username
|
|
password: aad_user_password
|
|
# batch credentials
|
|
batch:
|
|
aad:
|
|
authority_url: https://login.microsoftonline.com
|
|
endpoint: https://batch.core.windows.net/
|
|
directory_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
application_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
auth_key: 01234...
|
|
rsa_private_key_pem: some/path/privatekey.pem
|
|
x509_cert_sha1_thumbprint: 01234...
|
|
user: aad_username
|
|
password: aad_user_password
|
|
token_cache:
|
|
enabled: true
|
|
filename: some/path/token.cache
|
|
account_key: 01234...
|
|
account_key_keyvault_secret_id: https://<vault_name>.vault.azure.net/secrets/<secret_id>
|
|
account_service_url: https://<batch_account_name>.<region>.batch.azure.com/
|
|
resource_group: resource-group-of-batch-account
|
|
application_insights:
|
|
application_id: 01234...
|
|
instrumentation_key: 01234...
|
|
# storage credentials
|
|
storage:
|
|
aad:
|
|
authority_url: https://login.microsoftonline.com
|
|
endpoint: https://management.azure.com/
|
|
directory_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
application_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
auth_key: 01234...
|
|
rsa_private_key_pem: some/path/privatekey.pem
|
|
x509_cert_sha1_thumbprint: 01234...
|
|
user: aad_username
|
|
password: aad_user_password
|
|
token_cache:
|
|
enabled: true
|
|
filename: some/path/token.cache
|
|
mystorageaccount:
|
|
account: storage_account_name
|
|
account_key: 01234...
|
|
account_key_keyvault_secret_id: https://<vault_name>.vault.azure.net/secrets/<secret_id>
|
|
endpoint: core.windows.net
|
|
resource_group: resource-group-of-storage-account
|
|
# docker private registry credentials
|
|
docker_registry:
|
|
hub:
|
|
username: hub_username
|
|
password: hub_user_password
|
|
password_keyvault_secret_id: https://<vault_name>.vault.azure.net/secrets/<secret_id>
|
|
myserver.azurecr.io:
|
|
username: acr_username
|
|
password: acr_user_password
|
|
password_keyvault_secret_id: https://<vault_name>.vault.azure.net/secrets/<secret_id>
|
|
# singularity private registry credentials
|
|
singularity_registry:
|
|
myserver.azurecr.io:
|
|
username: acr_username
|
|
password: acr_user_password
|
|
password_keyvault_secret_id: https://<vault_name>.vault.azure.net/secrets/<secret_id>
|
|
# management credentials
|
|
management:
|
|
aad:
|
|
authority_url: https://login.microsoftonline.com
|
|
endpoint: https://management.azure.com/
|
|
directory_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
application_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
auth_key: 01234...
|
|
rsa_private_key_pem: some/path/privatekey.pem
|
|
x509_cert_sha1_thumbprint: 01234...
|
|
user: aad_username
|
|
password: aad_user_password
|
|
token_cache:
|
|
enabled: true
|
|
filename: some/path/token.cache
|
|
subscription_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
# keyvault credentials
|
|
keyvault:
|
|
aad:
|
|
authority_url: https://login.microsoftonline.com
|
|
endpoint: https://vault.azure.net/
|
|
directory_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
application_id: 01234567-89ab-cdef-0123-456789abcdef
|
|
auth_key: 01234...
|
|
rsa_private_key_pem: some/path/privatekey.pem
|
|
x509_cert_sha1_thumbprint: 01234...
|
|
user: aad_username
|
|
password: aad_user_password
|
|
token_cache:
|
|
enabled: true
|
|
filename: some/path/token.cache
|
|
credentials_secret_id: https://<vault_name>.vault.azure.net/secrets/<secret_id>
|
|
uri: https://<vault_name>.vault.azure.net/
|
|
# monitoring credentials
|
|
monitoring:
|
|
grafana:
|
|
admin:
|
|
username: grafana_username
|
|
password: grafana_user_password
|
|
# slurm credentials
|
|
slurm:
|
|
db_password: db_password
|
|
# TODO munge key
|