forked from cloudfoundry/cf-deployment
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathbits-service.yml
99 lines (88 loc) · 2.86 KB
/
bits-service.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
---
- type: replace
path: /instance_groups/name=api/jobs/-
value:
name: bits-service
release: bits-service
properties:
bits-service:
private_endpoint: &private_endpoint https://bits-service.service.cf.internal
public_endpoint: &public_endpoint https://bits-service.((system_domain))
secret: "((bits_service_secret))"
signing_users:
- username: admin
password: "((bits_service_signing_password))"
app_stash:
buildpacks:
droplets:
packages:
cc_updates:
ca_cert: "((service_cf_internal_ca.certificate))"
client_cert: "((cc_tls.certificate))"
client_key: "((cc_tls.private_key))"
- type: replace
path: /instance_groups/name=api/jobs/name=route_registrar/properties/route_registrar/routes/-
value:
name: bits-service
tls_port: 443
registration_interval: 20s
uris:
- bits-service.((system_domain))
server_cert_domain_san: *public_endpoint
tags:
component: bits-service
- type: replace
path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/bits_service?
value: &bits-service-config
enabled: true
public_endpoint: *public_endpoint
private_endpoint: *private_endpoint
username: admin
password: "((bits_service_signing_password))"
ca_cert: &ca_cert ((service_cf_internal_ca.certificate))
- type: replace
path: /instance_groups/name=cc-worker/jobs/name=cloud_controller_worker/properties/cc/bits_service?
value: *bits-service-config
- type: replace
path: /instance_groups/name=scheduler/jobs/name=cloud_controller_clock/properties/cc/bits_service?
value: *bits-service-config
- type: replace
path: /variables/-
value:
name: bits_service_secret
type: password
- type: replace
path: /variables/-
value:
name: bits_service_signing_password
type: password
- type: replace
path: /variables/name=bits_service_ssl?
value:
name: bits_service_ssl
type: certificate
options:
common_name: bits-service.service.cf.internal
alternative_names:
- bits-service.service.cf.internal
- "((system_domain))"
- "*.((system_domain))"
ca: service_cf_internal_ca
- type: replace
path: /instance_groups/name=api/jobs/name=bits-service/properties/bits-service/tls?
value:
cert: ((bits_service_ssl.certificate))
key: ((bits_service_ssl.private_key))
- type: replace
path: /instance_groups/name=router/jobs/name=gorouter/properties/router/backends?/enable_tls
value: true
- type: replace
path: /instance_groups/name=router/jobs/name=gorouter/properties/router/ca_certs?
value: *ca_cert
- type: replace
path: /releases/-
value:
name: bits-service
version: 1.4.0
url: https://bosh.io/d/github.com/cloudfoundry-incubator/bits-service-release?v=1.4.0
sha1: caa55a888046c2898063fabf0bb19c650ff9a618