Skip to content

policy-server-internal job from cf-networking/2.1.0

Github source: 1c0ac98c or master branch

Properties

ca_cert

Trusted CA certificate that was used to sign the vxlan policy agent’s client cert and key.

connect_timeout_seconds

Connection timeout between the policy server and its database.

Default
120

debug_port

Port for the debug server. Use this to adjust log level at runtime or dump process stats.

Default
31945

disable

Disable container to container networking.

Default
false

health_check_port

Port for the debug server. Use this to adjust log level at runtime or dump process stats.

Default
31946

internal_listen_port

Port where the policy server will serve its internal API.

Default
4003

listen_ip

IP address where the policy server will serve its API.

Default
0.0.0.0

log_level

Logging level (debug, info, warn, error).

Default
info

metron_port

Port of metron agent on localhost. This is used to forward metrics.

Default
3457

server_cert

Server certificate for TLS. Must have common name that matches the Consul DNS name of the policy server, eg policy-server.service.cf.internal.

server_key

Server key for TLS.

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/policy-server-internal/ directory (learn more).

  • bin/dns_health_check (from dns_health_check.erb)
  • bin/policy-server-internal_as_vcap (from policy-server-internal_as_vcap.erb)
  • bin/policy-server-internal_ctl (from policy-server-internal_ctl.erb)
  • bin/pre-start (from pre-start.erb)
  • config/certs/ca.crt (from ca.crt.erb)
  • config/certs/server.crt (from server.crt.erb)
  • config/certs/server.key (from server.key.erb)
  • config/policy-server-internal.json (from policy-server-internal.json.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.