edx/config.yaml at dev · calculquebec/edx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
magic_castle::site::tags:
  mgmt_extra:
    - cqedu::mgmt
    - cron
  edx:
    - restic
    - cqedu
    - tutor
    - cron
    - profile::mail
  internal_login:
    - motd
    - profile::slurm::submitter
    - profile::ssh::hostbased_auth::client
    - profile::ssh::hostbased_auth::server
    - profile::nfs
    - profile::software_stack
  proxy:
    - profile::reverse_proxy
    - profile::prometheus::caddy_exporter
  jupyterhub:
    - profile::jupyterhub::hub
    - profile::jupyterhub::hub::keytab

lookup_options:
  tutor::config:
    merge: hash
  tutor::openedx_extra_pip_requirements:
    merge: deep
  tutor::registration_email_patterns_allowed:
    merge: deep
  tutor::plugins:
    merge: deep
  tutor::env_patches:
    merge: deep
  cron::job:
    merge: hash

lookup_options:
  profile::users::ldap::groups:
    merge: first
profile::users::ldap::groups:
  'def-sponsor00':
    automember: true
    hbac_rules: ["internal_login:sshd", 'node:sshd', 'proxy:jupyterhub-login']

profile::freeipa::server::enable_mokey: false

profile::reverse_proxy::subdomains:
  edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  preview.edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  studio.edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  apps.edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  data.edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  superset.edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  meilisearch.edx: "http://edx1.%{lookup('profile::freeipa::base::ipa_domain')}"
  jupyter: "%{lookup('jupyterhub::bind_url')}"
profile::reverse_proxy::main2sub_redir: "edx"
jupyterhub::bind_url: "https://jupyter1.%{lookup('profile::freeipa::base::ipa_domain')}:8000"

prometheus::global_config:
    scrape_interval: '1m'
    scrape_timeout: '1m'
    external_labels:
        cluster: "%{alias('cluster_name')}"
        cloud: "%{alias('cloud_name')}"
        team: 'calculquebec'
        purpose: "evolo"
        replica: '1'

prometheus::remote_write_configs:
    - url: 'https://thanos-receive.dant.computecanada.ca/api/v1/receive'
      basic_auth:
          username: 'cqformation'
          password: "%{alias('prometheus_password')}"

profile::slurm::base::slurm_version: '24.11'
profile::slurm::base::suspend_time: 900
profile::slurm::base::resume_timeout: 900
profile::slurm::base::suspend_rate: 80
profile::slurm::base::resume_rate: 80

profile::mail::dkim::private_key: "%{alias('dkim_key')}"
profile::nfs::server::enable_client_quotas: true