forked from cloudfoundry/cf-deployment
-
Notifications
You must be signed in to change notification settings - Fork 0
/
enable-nfs-volume-service.yml
159 lines (159 loc) · 4.38 KB
/
enable-nfs-volume-service.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
- type: replace
path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/volume_services_enabled?
value: true
- type: replace
path: /instance_groups/name=cc-worker/jobs/name=cloud_controller_worker/properties/cc/volume_services_enabled?
value: true
- type: replace
path: /instance_groups/name=scheduler/jobs/name=cloud_controller_clock/properties/cc/volume_services_enabled?
value: true
- type: replace
path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/nfs-broker-push-client?
value:
authorities: cloud_controller.admin,clients.read
authorized-grant-types: client_credentials
secret: ((nfs-broker-push-uaa-client-secret))
- type: replace
path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/nfs-broker-credhub-client?
value:
authorities: credhub.read,credhub.write
authorized-grant-types: client_credentials
secret: ((nfs-broker-credhub-uaa-client-secret))
- type: replace
path: /instance_groups/name=credhub/jobs/name=credhub/properties/credhub/authorization/permissions/-
value:
actors:
- uaa-client:nfs-broker-credhub-client
operations:
- read
- write
- delete
- read_acl
- write_acl
path: /nfsbroker/*
- type: replace
path: /instance_groups/-
value:
azs:
- z1
instances: 1
jobs:
- name: nfsbrokerpush
properties:
nfsbrokerpush:
app_domain: ((system_domain))
app_name: nfs-broker
cf:
client_id: nfs-broker-push-client
client_secret: ((nfs-broker-push-uaa-client-secret))
create_credhub_security_group: true
create_sql_security_group: false
credhub:
uaa_ca_cert: ((uaa_ssl.ca))
uaa_client_id: nfs-broker-credhub-client
uaa_client_secret: ((nfs-broker-credhub-uaa-client-secret))
domain: ((system_domain))
organization: system
password: ((nfs-broker-password))
skip_cert_verify: true
space: nfs-broker-space
store_id: nfsbroker
syslog_url: ""
username: nfs-broker
provides:
nfsbrokerpush:
as: ignore-me
release: nfs-volume
- name: cf-cli-7-linux
release: cf-cli
lifecycle: errand
name: nfs-broker-push
networks:
- name: default
stemcell: default
vm_type: minimal
- type: replace
path: /instance_groups/name=diego-cell/jobs/-
value:
name: nfsv3driver
properties:
nfsv3driver:
tls:
ca_cert: ((nfsv3driver_cert.ca))
client_cert: ((nfsv3driver_client_cert.certificate))
client_key: ((nfsv3driver_client_cert.private_key))
server_cert: ((nfsv3driver_cert.certificate))
server_key: ((nfsv3driver_cert.private_key))
release: nfs-volume
- type: replace
path: /instance_groups/name=diego-cell/jobs/name=mapfs?
value:
name: mapfs
release: mapfs
- type: replace
path: /variables/-
value:
name: nfs-broker-password
type: password
- type: replace
path: /variables/-
value:
name: nfs-broker-push-uaa-client-secret
type: password
- type: replace
path: /variables/-
value:
name: nfs-broker-credhub-password
type: password
- type: replace
path: /variables/-
value:
name: nfs-broker-credhub-uaa-client-secret
type: password
- type: replace
path: /variables/-
value:
name: nfs_ca
options:
common_name: nfs-ca
is_ca: true
type: certificate
- type: replace
path: /variables/-
value:
name: nfsv3driver_cert
options:
alternative_names:
- 127.0.0.1
ca: nfs_ca
common_name: 127.0.0.1
extended_key_usage:
- server_auth
type: certificate
- type: replace
path: /variables/-
value:
name: nfsv3driver_client_cert
options:
alternative_names:
- nfs-client
ca: nfs_ca
common_name: nfs-client
extended_key_usage:
- client_auth
type: certificate
update_mode: converge
- type: replace
path: /releases/-
value:
name: nfs-volume
sha1: 656135a181b166faeb235bb2b80191278fc3cf0a
url: https://bosh.io/d/github.com/cloudfoundry/nfs-volume-release?v=7.1.8
version: 7.1.8
- type: replace
path: /releases/name=mapfs?
value:
name: mapfs
sha1: f0275df0f4771940bc68ec5f56a0e795dc391e3e
url: https://bosh.io/d/github.com/cloudfoundry/mapfs-release?v=1.2.12
version: 1.2.12