Vagrantfile

# -*- mode: ruby -*-
# vi: set ft=ruby :

require 'ipaddr'
require 'securerandom'

#####
#
#  Please change the below values to something that makes sense to you.
#
#####
comanage_version    = "3.0.0-rc2"

# Define the host name for each of the three VMs
hostname_portal     = "portal"
hostname_ldap       = "ldap"
hostname_ssh        = "ssh"

# Define the start address of the first VM. Successive VMs will get
# successive IP addresses.
start_ip_address    = IPAddr.new('192.168.64.10')

# These values, amongst others, are used to create the SP metadata
domain_name         = "example.org"
given_name          = "John"
surname             = "Doe"
email               = "john.doe@example.org"
service_description = "This is a demo instance for COmanage testing purposes"
display_name        = "COmanage DEMO - #{given_name} #{surname}"

# These values are used for certificates
country             = "NL"
state               = "North-Holland"
locality            = "Amsterdam"
organisation        = "Example.org Ltd."
organisation_unit   = "IT"
ssl_cert_days_valid = 365

# The credentials for the admin user in LDAP
ldap_admin          = "admin"
ldap_admin_passwd   = "Please-change-me!"

# Where the CA, in case of self singed certificates, stores its
# certificates and configuration files.
cert_path           = "ca/intermediate"

#####
#
#  No need to change anything below these lines.
#
#####

machinesNames       = Array[hostname_portal, hostname_ldap, hostname_ssh]
portal_fqdn         = "#{machinesNames[0]}.#{domain_name}"
ldap_fqdn           = "#{machinesNames[1]}.#{domain_name}"
subject             = "/C=#{country}/ST=#{state}/L=#{locality}/O='#{organisation}'/OU=#{organisation_unit}/CN=#{ldap_fqdn}"

#  Construct the ldap_basedn based on the domain variable.
ldap_basedn = ""
domainComponents = domain_name.split('.')
domainComponents.each_with_index do |dc, index|
    ldap_basedn = ldap_basedn + "dc=#{dc}"
    if index != (domainComponents.length - 1)
        ldap_basedn = ldap_basedn + ","
    end
end

#  Determine IP addresses to the VMs.
machineIP = Hash.new(machinesNames.length)
ip_address = start_ip_address
machinesNames.each { |machineName|
    machineIP.store(machineName, ip_address.to_s)
    ip_address = ip_address.succ
}

Vagrant.configure("2") do |config|
    config.vm.box = "ubuntu/xenial64"
    config.hostmanager.enabled = true
    config.hostmanager.manage_host = false
    config.hostmanager.manage_guest = true
    config.hostmanager.ignore_private_ip = false
    config.hostmanager.include_offline = true

    config.vm.define "#{machinesNames[0]}" do |portal|
        portal.vm.provider "virtualbox" do |vbox|
            vbox.memory = 1024
            vbox.name = "portal"
        end
        portal.vm.network "private_network", ip: "#{machineIP[hostname_portal]}"
        portal.vm.hostname = "portal.#{domain_name}"
   end

    config.vm.define "#{machinesNames[1]}" do |ldap|
        ldap.vm.provider "virtualbox" do |vbox|
            vbox.memory = "512"
            vbox.name = "ldap"
        end
        ldap.vm.network "private_network", ip: "#{machineIP[hostname_ldap]}"
        ldap.vm.hostname = "ldap.#{domain_name}"
   end

    config.vm.define "#{machinesNames[2]}" do |ssh|
        ssh.vm.provider "virtualbox" do |vbox|
            vbox.memory = "512"
            vbox.name = "ssh"
        end
        ssh.vm.network "private_network", ip: "#{machineIP[hostname_ssh]}"
        ssh.vm.hostname = "ssh.#{domain_name}"
    end

    config.vm.provision "ansible_local" do |ansible|
        ansible.playbook = "comanage.yml"
        ansible.extra_vars = { ansible_user: 'ubuntu' }
        ansible.raw_arguments = Shellwords.shellsplit(ENV['ANSIBLE_ARGS']) if ENV['ANSIBLE_ARGS']

        ansible.groups = {
            "all" => ["#{machinesNames[0]}", "#{machinesNames[1]}", "#{machinesNames[2]}"],
            "comanage-portal" => ["#{machinesNames[0]}"],
            "ldap-server" => ["#{machinesNames[1]}"],
            "ssh-access" => ["#{machinesNames[2]}"],
            "phpldapadmin" => ["#{machinesNames[0]}"],

            "all:vars" => {
                "domain_name" => "#{domain_name}",
                "remote_user" => "ubuntu",
                "data_dir" => "data",
           },
            "comanage-portal:vars" => {
                "hostname" => "#{hostname_portal}",
                "certificate_ca" => "provided",
                "sp_fqdn" => "#{portal_fqdn}",
                "sp_protocol" => "https://",
                "sp_path" => "/registry/auth/sp",
                "sp_random_part" => SecureRandom.uuid,
                "given_name" => "#{given_name}",
                "surname" => "#{surname}",
                "email_contact" => "#{email}",
                "organisation" => "#{organisation}",
                "service_description" => "#{service_description}",
                "service_display_name" => "#{display_name}",
                "comanage_version" => "#{comanage_version}",
                "comanage_admin_given_name" => "#{given_name}",
                "comanage_admin_family_name" => "#{surname}",
                "comanage_admin_username" => "admin"
            },
            "ldap-group:children" => ["ldap-server", "phpldapadmin"],
            "ldap-group:vars" => {
                "hostname" => "#{hostname_ldap}",
                "ldap_fqdn" => "#{ldap_fqdn}",
                "ldap_basedn" => "#{ldap_basedn}",
                "organisation" => "#{organisation}"
            },
            "ldap-server:vars" => {
                "certificate_ca" => "provided",
                "ldap_admin" => "#{ldap_admin}",
                "ldap_admin_passwd" => "#{ldap_admin_passwd}",
                "ldap_rootdn" => "cn=#{ldap_admin},#{ldap_basedn}",
           }
        }
    end
end