63 lines
2.9 KiB
YAML
63 lines
2.9 KiB
YAML
|
# =============================================================================
|
|||
|
|
# cluster.p3.yml — Skenario P3: komponen EXISTING milik PIHAK LAIN (host/IP sendiri)
|
|||
|
|
# + DUA OpenLDAP independen (existing utk keycloak, cluster utk trino/starrocks).
|
|||
|
|
# -----------------------------------------------------------------------------
|
|||
|
|
# Kondisi client (nyata):
|
|||
|
|
# - keycloak, minio, nessie : EXISTING, dikelola pihak lain — masing-masing bisa di
|
|||
|
|
# host/IP SENDIRI (di sini ditandai `components.<c>.address`).
|
|||
|
|
# - openldap : DUA instance independen (analog postgres):
|
|||
|
|
# · sisi existing : openldap LOKAL (untuk Keycloak) — DI LUAR
|
|||
|
|
# inventory ini (setup single-host existing; JANGAN set LDAP_URL).
|
|||
|
|
# · cluster : openldap di `control` (tier identity) →
|
|||
|
|
# group-provider Trino/StarRocks.
|
|||
|
|
# - postgres (utk keycloak/nessie): sisi existing, BUKAN milik cluster → tak di inventory.
|
|||
|
|
# - postgres cluster : milik sendiri di `state`.
|
|||
|
|
#
|
|||
|
|
# Perbedaan dari P1: di P1 identity (keycloak+openldap+nessie) ada di host existing; di P3
|
|||
|
|
# `keycloak`+`nessie` eksternal (per-host) sementara `openldap` ada di KEDUA sisi (independen).
|
|||
|
|
# Penanda eksternal kini `components.<c>.address` (tanpa entri host) → tak dijalankan cluster.
|
|||
|
|
#
|
|||
|
|
# SIMULASI: ketiga komponen existing boleh dijalankan di SATU host (docker compose +
|
|||
|
|
# network sendiri) → isi `address` sama (mis. 100.93.54.108). REAL: isi alamat berbeda.
|
|||
|
|
#
|
|||
|
|
# .env cluster — override `*_INTERNAL_PORT` HANYA untuk komponen EKSTERNAL:
|
|||
|
|
# KEYCLOAK_INTERNAL_PORT=12080 MINIO_INTERNAL_PORT=12900 NESSIE_INTERNAL_PORT=12120
|
|||
|
|
# JANGAN override OPENLDAP_INTERNAL_PORT — openldap cluster LOKAL (di `control`), port 389.
|
|||
|
|
# (Plus: samakan secret existing — 5× *_CLIENT_SECRET, MINIO_ROOT_*; LDAP_ADMIN_PASSWORD
|
|||
|
|
# per-sisi, TIDAK perlu disamakan.)
|
|||
|
|
#
|
|||
|
|
# Langkah lengkap simulasi: docs/sicabe-p3-simulation-runbook.md
|
|||
|
|
#
|
|||
|
|
# Verifikasi (tanpa akses admin): hanya memeriksa apakah keycloak/minio/nessie memenuhi
|
|||
|
|
# kebutuhan (issuer, TLS, S3, secret) — lihat docs/sicabe-p1-existing-runbook.md §7.
|
|||
|
|
# =============================================================================
|
|||
|
|
|
|||
|
|
version: 1
|
|||
|
|
cluster:
|
|||
|
|
name: sicabe-p3
|
|||
|
|
env: simulation
|
|||
|
|
|
|||
|
|
tls:
|
|||
|
|
mode: none
|
|||
|
|
|
|||
|
|
preset: a3
|
|||
|
|
|
|||
|
|
hosts:
|
|||
|
|
# control mengelola OPENLDAP cluster (tier identity) — keycloak/nessie di-override eksternal.
|
|||
|
|
control:
|
|||
|
|
address: 100.112.76.124
|
|||
|
|
tiers: [identity, policy, pipeline, governance]
|
|||
|
|
compute:
|
|||
|
|
address: 100.123.123.71
|
|||
|
|
tiers: [coord, engine]
|
|||
|
|
state:
|
|||
|
|
address: 100.73.229.107
|
|||
|
|
tiers: [state]
|
|||
|
|
|
|||
|
|
components:
|
|||
|
|
# EXISTING (pihak lain) — TANPA host; endpoint = alamat ini di semua host.
|
|||
|
|
keycloak: { address: 100.93.54.108 }
|
|||
|
|
minio: { address: 100.93.54.108 }
|
|||
|
|
nessie: { address: 100.93.54.108 }
|
|||
|
|
dremio: { enabled: false }
|