Skip to content

policy-server job from netman/0.5.0

Github source: f7868a29 or master branch

Properties

policy-server

ca_cert

Trusted CA certificate for clients

ca_cert_file

Trusted CA certificate file for clients

Default
/var/vcap/jobs/policy-server/config/certs/ca.crt

database

connection_string

Connection string to policy server database (for example, postgres://username:[email protected]:1234/db_name)

type

Type of database: postgres or mysql

Default
postgres

internal_listen_port

Port where the policy server will serve its internal API

Default
4003

listen_host

Host where the policy server will serve its API

Default
0.0.0.0

listen_port

Port where the policy server will serve its external API

Default
4002

metron_address

Forward metrics to this metron agent

Default
127.0.0.1:3457

server_cert

Server certificate for TLS

server_cert_file

Server certificate for TLS

Default
/var/vcap/jobs/policy-server/config/certs/server.crt

server_key

Server key for TLS

server_key_file

Server key file for TLS

Default
/var/vcap/jobs/policy-server/config/certs/server.key

skip_ssl_validation

skip verifying ssl certs when speaking to uaa

Default
false

tag_length

Length in bytes of the packet tags to generate for policy sources and destinations. Must be greater than 0 and less than 4.

Default
2

uaa_client

uaa client name

Default
network-policy

uaa_client_secret

uaa client secret

Default
network-policy-secret

uaa_url

address of uaa server

Default
https://uaa.bosh-lite.com

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/policy-server/ directory (learn more).

  • bin/policy-server_ctl (from policy-server_ctl.erb)
  • config/certs/ca.crt (from ca.crt.erb)
  • config/certs/server.crt (from server.crt.erb)
  • config/certs/server.key (from server.key.erb)
  • config/policy-server.json (from policy-server.json.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.