Skip to content

blobstore job from bosh/280.0.7

Github source: e7d35115d or master branch

Properties

blobstore

agent

additional_users

An array of objects with keys ‘user’ and ‘password’ agents must use to access Blobstore via HTTP Basic Auth. These users are in addition to the user defined by ‘blobstore.agent.user’ and ‘blobstore.agent.password’. This is to enable blobstore credential rotation for the agents.

password

Password agents must use to access blobstore via HTTP Basic (mandatory when the user is provided)

user

Username agents must use to access blobstore via HTTP Basic (optional when ‘blobstore.enable_signed_urls’ is true)

allow_http

Enable http connections to blobstore, in addition to https

Default
true

bbr

enabled

Enable bbr backup and restore operations

Default
true

director

password

Password director must use to access blobstore via HTTP Basic

user

Username director must use to access blobstore via HTTP Basic

enable_signed_urls

Enable blobstore to pre-sign urls so that clients do not require blobstore credentials

Default
false

ipv6_listen

Enable binding to IPv6 addresses

Default
false

max_upload_size

Max allowed file size for upload

Default
10000m

nginx

enable_metrics_endpoint

Expose basic nginx metrics on localhost:/stats endpoint. Uses the ngx_http_stub_status_module (see http://nginx.org/en/docs/http/ngx_http_stub_status_module.html).

Default
false
workers

Number of nginx workers for blobstore

Default
auto

port

TCP port blobstore server (ngnix) listens on

Default
25250

secret

Secret used to sign the HMAC pre-signed URLs

tls

cert
certificate

SSL cert for blobstore nginx server

private_key

SSL cert key for blobstore nginx server

ssl_ciphers

List of SSL ciphers to allow (format: https://www.openssl.org/docs/manmaster/man1/ciphers.html - CIPHER LIST FORMAT section)

Default
DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
ssl_prefer_server_ciphers

Prefer server’s cipher priority instead of client’s (true for On, false for Off)

Default
true
ssl_protocols

SSL/TLS protocols to allow

Default
TLSv1.2

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/blobstore/ directory (learn more).

  • bin/bbr/backup (from bbr_backup)
  • bin/bbr/restore (from bbr_restore)
  • bin/pre-start (from pre-start)
  • config/bpm.yml (from bpm.yml)
  • config/mime.types (from mime.types)
  • config/nginx.conf (from nginx.conf.erb)
  • config/read_users (from read_users.erb)
  • config/server_tls_cert.pem (from server_tls_cert.pem.erb)
  • config/server_tls_private_key.pem (from server_tls_private_key.pem.erb)
  • config/sites/blobstore.conf (from blobstore.conf.erb)
  • config/write_users (from write_users.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.