enable-nfs-volume-service.yml

- type: replace
  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/volume_services_enabled?
  value: true
- type: replace
  path: /instance_groups/name=cc-worker/jobs/name=cloud_controller_worker/properties/cc/volume_services_enabled?
  value: true
- type: replace
  path: /instance_groups/name=scheduler/jobs/name=cloud_controller_clock/properties/cc/volume_services_enabled?
  value: true
- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/nfs-broker-push-client?
  value:
    authorities: cloud_controller.admin,clients.read
    authorized-grant-types: client_credentials
    secret: ((nfs-broker-push-uaa-client-secret))
- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/nfs-broker-credhub-client?
  value:
    authorities: credhub.read,credhub.write
    authorized-grant-types: client_credentials
    secret: ((nfs-broker-credhub-uaa-client-secret))
- type: replace
  path: /instance_groups/name=credhub/jobs/name=credhub/properties/credhub/authorization/permissions/-
  value:
    actors:
    - uaa-client:nfs-broker-credhub-client
    operations:
    - read
    - write
    - delete
    - read_acl
    - write_acl
    path: /nfsbroker/*
- type: replace
  path: /instance_groups/-
  value:
    azs:
    - z1
    instances: 1
    jobs:
    - name: nfsbrokerpush
      properties:
        nfsbrokerpush:
          app_domain: ((system_domain))
          app_name: nfs-broker
          cf:
            client_id: nfs-broker-push-client
            client_secret: ((nfs-broker-push-uaa-client-secret))
          create_credhub_security_group: true
          create_sql_security_group: false
          credhub:
            uaa_ca_cert: ((uaa_ssl.ca))
            uaa_client_id: nfs-broker-credhub-client
            uaa_client_secret: ((nfs-broker-credhub-uaa-client-secret))
          domain: ((system_domain))
          organization: system
          password: ((nfs-broker-password))
          skip_cert_verify: true
          space: nfs-broker-space
          store_id: nfsbroker
          syslog_url: ""
          username: nfs-broker
      provides:
        nfsbrokerpush:
          as: ignore-me
      release: nfs-volume
    - name: cf-cli-7-linux
      release: cf-cli
    lifecycle: errand
    name: nfs-broker-push
    networks:
    - name: default
    stemcell: default
    vm_type: minimal
- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: nfsv3driver
    properties:
      nfsv3driver:
        tls:
          ca_cert: ((nfsv3driver_cert.ca))
          client_cert: ((nfsv3driver_client_cert.certificate))
          client_key: ((nfsv3driver_client_cert.private_key))
          server_cert: ((nfsv3driver_cert.certificate))
          server_key: ((nfsv3driver_cert.private_key))
    release: nfs-volume
- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=mapfs?
  value:
    name: mapfs
    release: mapfs
- type: replace
  path: /variables/-
  value:
    name: nfs-broker-password
    type: password
- type: replace
  path: /variables/-
  value:
    name: nfs-broker-push-uaa-client-secret
    type: password
- type: replace
  path: /variables/-
  value:
    name: nfs-broker-credhub-password
    type: password
- type: replace
  path: /variables/-
  value:
    name: nfs-broker-credhub-uaa-client-secret
    type: password
- type: replace
  path: /variables/-
  value:
    name: nfs_ca
    options:
      common_name: nfs-ca
      is_ca: true
    type: certificate
- type: replace
  path: /variables/-
  value:
    name: nfsv3driver_cert
    options:
      alternative_names:
      - 127.0.0.1
      ca: nfs_ca
      common_name: 127.0.0.1
      extended_key_usage:
      - server_auth
    type: certificate
- type: replace
  path: /variables/-
  value:
    name: nfsv3driver_client_cert
    options:
      alternative_names:
      - nfs-client
      ca: nfs_ca
      common_name: nfs-client
      extended_key_usage:
      - client_auth
    type: certificate
    update_mode: converge
- type: replace
  path: /releases/-
  value:
    name: nfs-volume
    sha1: 8268f8b73c3c79154f90c50f1ffe9ff2ba2a9f01
    url: https://bosh.io/d/github.com/cloudfoundry/nfs-volume-release?v=7.1.72
    version: 7.1.72
- type: replace
  path: /releases/name=mapfs?
  value:
    name: mapfs
    sha1: c202edf673847bb2284ceb447ae425079b683449
    url: https://bosh.io/d/github.com/cloudfoundry/mapfs-release?v=1.2.79
    version: 1.2.79