warden job from bosh-warden-cpi/11

Github source: 8ae5a596 or master branch

Properties¶

warden¶

allow_networks¶

List of CIDR blocks to which containers will be allowed access (applied after deny).

Default

[]

deny_networks¶

List of CIDR blocks to which containers will be denied access.

Default

[]

disk_quota_enabled¶

Enforce disk quotas.

Default

true

kernel_network_tuning_enabled¶

enable or disable kernel network tuning; disable for Warden CPI

Default

true

listen_address¶

Warden server listening address.

Default

/var/vcap/data/warden/warden.sock

listen_network¶

Warden server connection mode (tcp or unix).

Default

unix

network_pool¶

Network pool CIDR for containers; each container will get a /30

Default

10.254.0.0/16

Templates¶

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/warden/ directory (learn more).

• bin/warden_ctl (from warden_ctl.erb)

Packages¶

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.

• iptables
• pid_utils
• shadow
• warden-linux