Skip to content

uaa job from uaa-lite/1

Github source: 4b896cf or master branch

Properties

uaa

clients

Map of OAuth client configurations. Example: bosh_cli: secret: “bosh-cli-secret” authorized_grant_types: - password - refresh_token scope: - openid - bosh.admin authorities: - uaa.none access_token_validity: 600 refresh_token_validity: 86400

Default
{}

issuer

Token issuer URL (e.g., https://uaa.service.cf.internal:8443)

jwt

policy
access_token_validity

Default access token validity in seconds

Default
43200
active_key_id

Active signing key ID

Default
key-1
keys

Map of key_id to signing key configuration. Example: key-1: signingKey: | —–BEGIN RSA PRIVATE KEY—– … —–END RSA PRIVATE KEY—–

refresh_token_validity

Default refresh token validity in seconds

Default
2.592e+06

port

HTTPS port for UAA

Default
8443

tls

certificate

TLS certificate in PEM format

private_key

TLS private key in PEM format

users

Map of user configurations. Passwords are in plaintext and will be hashed on startup. Example: admin: password: “admin-password” email: “[email protected]” groups: - bosh.admin - openid

Default
{}

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/uaa/ directory (learn more).

  • bin/ctl (from ctl.erb)
  • config/config.yml (from config.yml.erb)
  • config/tls_cert.pem (from tls_cert.pem.erb)
  • config/tls_key.pem (from tls_key.pem.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.