github.com/randomtask1155/cli@v6.41.1-0.20181227003417-a98eed78cbde+incompatible/ci/infrastructure/assets/legacy-cf-deployment.yml (about)

     1  ---
     2  name: cf
     3  update:
     4    canaries: 1
     5    canary_watch_time: 30000-1200000
     6    max_in_flight: 5
     7    serial: false
     8    update_watch_time: 5000-1200000
     9  instance_groups:
    10  - name: consul
    11    azs:
    12    - z1
    13    - z2
    14    - z3
    15    instances: 3
    16    persistent_disk_type: 5GB
    17    vm_type: m3.medium
    18    stemcell: default
    19    update:
    20      max_in_flight: 1
    21      serial: true
    22    networks:
    23    - name: private
    24      static_ips: &consul_ips
    25      - 10.0.31.190
    26      - 10.0.47.190
    27      - 10.0.63.190
    28    jobs:
    29    - name: consul_agent
    30      release: consul
    31      properties:
    32        consul:
    33          agent:
    34            mode: server
    35            domain: cf.internal
    36            servers: &consul_machines
    37              lan: *consul_ips
    38          encrypt_keys:
    39          - "((consul_encrypt_key))"
    40          agent_cert: "((consul_agent.certificate))"
    41          agent_key: "((consul_agent.private_key))"
    42          ca_cert: "((consul_agent.ca))"
    43          server_cert: "((consul_server.certificate))"
    44          server_key: "((consul_server.private_key))"
    45    - name: metron_agent
    46      release: loggregator
    47      properties: &metron_agent_properties
    48        syslog_daemon_config:
    49          enable: false
    50        metron_agent:
    51          deployment: "((system_domain))"
    52          etcd:
    53            client_cert: "((etcd_client.certificate))"
    54            client_key: "((etcd_client.private_key))"
    55        metron_endpoint:
    56          shared_secret: "((dropsonde_shared_secret))"
    57        loggregator:
    58          tls:
    59            ca_cert: "((loggregator_ca.certificate))"
    60            trafficcontroller:
    61              cert: "((loggregator_tls_tc.certificate))"
    62              key: "((loggregator_tls_tc.private_key))"
    63            doppler:
    64              cert: "((loggregator_tls_doppler.certificate))"
    65              key: "((loggregator_tls_doppler.private_key))"
    66          etcd:
    67            require_ssl: true
    68            ca_cert: "((etcd_server.ca))"
    69            machines:
    70            - etcd.service.cf.internal
    71  - name: nats
    72    azs:
    73    - z1
    74    - z2
    75    instances: 2
    76    vm_type: c3.large
    77    vm_extensions:
    78    - 5GB_ephemeral_disk
    79    stemcell: default
    80    networks:
    81    - name: private
    82      static_ips: &nats_machines
    83      - 10.0.31.191
    84      - 10.0.47.191
    85    jobs:
    86    - name: consul_agent
    87      release: consul
    88      properties:
    89        consul:
    90          agent:
    91            mode: client
    92            domain: cf.internal
    93            servers: *consul_machines
    94          encrypt_keys:
    95          - "((consul_encrypt_key))"
    96          agent_cert: "((consul_agent.certificate))"
    97          agent_key: "((consul_agent.private_key))"
    98          ca_cert: "((consul_agent.ca))"
    99          server_cert: "((consul_server.certificate))"
   100          server_key: "((consul_server.private_key))"
   101    - name: nats_stream_forwarder
   102      release: nats
   103      properties:
   104        nats: &nats_properties
   105          machines: *nats_machines
   106          password: "((nats_password))"
   107          port: 4222
   108          user: nats
   109    - name: nats
   110      release: nats
   111      properties:
   112        nats:
   113          password: "((nats_password))"
   114          user: nats
   115          debug: true
   116          monitor_port: 9222
   117          prof_port: 6060
   118          trace: false
   119    - name: metron_agent
   120      release: loggregator
   121      properties: *metron_agent_properties
   122  - name: etcd
   123    azs:
   124    - z1
   125    - z2
   126    - z3
   127    instances: 3
   128    persistent_disk_type: 5GB
   129    vm_type: m3.medium
   130    vm_extensions:
   131    - 5GB_ephemeral_disk
   132    stemcell: default
   133    update:
   134      serial: true
   135      max_in_flight: 1
   136    networks:
   137    - name: private
   138    jobs:
   139    - name: consul_agent
   140      release: consul
   141      properties:
   142        consul:
   143          agent:
   144            mode: client
   145            domain: cf.internal
   146            servers: *consul_machines
   147            services:
   148              etcd: {}
   149          encrypt_keys:
   150          - "((consul_encrypt_key))"
   151          agent_cert: "((consul_agent.certificate))"
   152          agent_key: "((consul_agent.private_key))"
   153          ca_cert: "((consul_agent.ca))"
   154          server_cert: "((consul_server.certificate))"
   155          server_key: "((consul_server.private_key))"
   156    - name: etcd
   157      release: etcd
   158      properties:
   159        etcd:
   160          advertise_urls_dns_suffix: etcd.service.cf.internal
   161          cluster:
   162          - instances: 3
   163            name: etcd
   164          peer_require_ssl: true
   165          require_ssl: true
   166          ca_cert: "((etcd_client.ca))"
   167          client_cert: "((etcd_client.certificate))"
   168          client_key: "((etcd_client.private_key))"
   169          server_cert: "((etcd_server.certificate))"
   170          server_key: "((etcd_server.private_key))"
   171          peer_ca_cert: "((etcd_peer.ca))"
   172          peer_cert: "((etcd_peer.certificate))"
   173          peer_key: "((etcd_peer.private_key))"
   174    - name: etcd_metrics_server
   175      release: etcd
   176      properties:
   177        etcd_metrics_server:
   178          etcd:
   179            dns_suffix: etcd.service.cf.internal
   180            require_ssl: true
   181            ca_cert: "((etcd_server.ca))"
   182            client_cert: "((etcd_client.certificate))"
   183            client_key: "((etcd_client.private_key))"
   184    - name: metron_agent
   185      release: loggregator
   186      properties: *metron_agent_properties
   187  - name: mysql
   188    azs:
   189    - z1
   190    persistent_disk_type: 10GB
   191    instances: 1
   192    vm_type: m3.large
   193    vm_extensions:
   194    - 10GB_ephemeral_disk
   195    stemcell: default
   196    update:
   197      serial: true
   198    networks:
   199    - name: private
   200      static_ips:
   201      - 10.0.31.193
   202    jobs:
   203    - name: consul_agent
   204      release: consul
   205      properties:
   206        consul:
   207          agent:
   208            mode: client
   209            domain: cf.internal
   210            servers: *consul_machines
   211          encrypt_keys:
   212          - "((consul_encrypt_key))"
   213          agent_cert: "((consul_agent.certificate))"
   214          agent_key: "((consul_agent.private_key))"
   215          ca_cert: "((consul_agent.ca))"
   216          server_cert: "((consul_server.certificate))"
   217          server_key: "((consul_server.private_key))"
   218    - name: mysql
   219      release: cf-mysql
   220      properties:
   221        network_name: private
   222        cf_mysql:
   223          mysql:
   224            galera_healthcheck:
   225              db_password: "((cf_mysql_mysql_galera_healthcheck_password))"
   226              endpoint_username: galera_healthcheck
   227              endpoint_password: "((cf_mysql_mysql_galera_healthcheck_endpoint_password))"
   228            admin_password: "((cf_mysql_mysql_admin_password))"
   229            roadmin_password: "((cf_mysql_mysql_roadmin_password))"
   230            cluster_health:
   231              password: "((cf_mysql_mysql_cluster_health_password))"
   232            seeded_databases:
   233            - name: cloud_controller
   234              username: cloud_controller
   235              password: "((cf_mysql_mysql_seeded_databases_cc_password))"
   236            - name: uaa
   237              username: uaa
   238              password: "((cf_mysql_mysql_seeded_databases_uaa_password))"
   239            - name: diego
   240              username: diego
   241              password: "((cf_mysql_mysql_seeded_databases_diego_password))"
   242            database_startup_timeout: 600
   243            cluster_ips:
   244            - 10.0.31.193
   245    - name: metron_agent
   246      release: loggregator
   247      properties: *metron_agent_properties
   248  - name: diego-bbs
   249    azs:
   250    - z1
   251    - z2
   252    instances: 2
   253    vm_type: m3.large
   254    stemcell: default
   255    networks:
   256    - name: private
   257    jobs:
   258    - name: consul_agent
   259      release: consul
   260      properties:
   261        consul:
   262          agent:
   263            mode: client
   264            domain: cf.internal
   265            servers: *consul_machines
   266          encrypt_keys:
   267          - "((consul_encrypt_key))"
   268          agent_cert: "((consul_agent.certificate))"
   269          agent_key: "((consul_agent.private_key))"
   270          ca_cert: "((consul_agent.ca))"
   271          server_cert: "((consul_server.certificate))"
   272          server_key: "((consul_server.private_key))"
   273    - name: bbs
   274      release: diego
   275      properties:
   276        diego:
   277          bbs:
   278            active_key_label: key-2016-06
   279            encryption_keys:
   280            - label: key-2016-06
   281              passphrase: "((diego_bbs_encryption_keys_passphrase))"
   282            sql:
   283              db_host: 10.0.31.193
   284              db_port: 3306
   285              db_schema: diego
   286              db_username: diego
   287              db_password: "((cf_mysql_mysql_seeded_databases_diego_password))"
   288              db_driver: mysql
   289            etcd:
   290              machines: []
   291              ca_cert: nil
   292              client_cert: nil
   293              client_key: nil
   294            ca_cert: "((diego_bbs.ca))"
   295            server_cert: "((diego_bbs_server.certificate))"
   296            server_key: "((diego_bbs_server.private_key))"
   297    - name: metron_agent
   298      release: loggregator
   299      properties: *metron_agent_properties
   300  - name: uaa
   301    azs:
   302    - z1
   303    - z2
   304    instances: 2
   305    vm_type: m3.medium
   306    vm_extensions:
   307    - 10GB_ephemeral_disk
   308    stemcell: default
   309    networks:
   310    - name: private
   311    jobs:
   312    - name: consul_agent
   313      release: consul
   314      properties:
   315        consul:
   316          agent:
   317            mode: client
   318            domain: cf.internal
   319            servers: *consul_machines
   320            services:
   321              uaa: {}
   322          encrypt_keys:
   323          - "((consul_encrypt_key))"
   324          agent_cert: "((consul_agent.certificate))"
   325          agent_key: "((consul_agent.private_key))"
   326          ca_cert: "((consul_agent.ca))"
   327          server_cert: "((consul_server.certificate))"
   328          server_key: "((consul_server.private_key))"
   329    - name: uaa
   330      release: uaa
   331      properties:
   332        login:
   333          saml:
   334            serviceProviderKey: "((uaa_login_saml.private_key))"
   335            serviceProviderKeyPassword: ''
   336            serviceProviderCertificate: "((uaa_login_saml.certificate))"
   337        uaa:
   338          sslCertificate: "((uaa_ssl.certificate))"
   339          sslPrivateKey: "((uaa_ssl.private_key))"
   340          zones:
   341            internal:
   342              hostnames:
   343              - uaa.service.cf.internal
   344          url: https://uaa.((system_domain))
   345          admin:
   346            client_secret: "((uaa_admin_client_secret))"
   347          scim:
   348            users:
   349            - name: admin
   350              password: "((cf_admin_password))"
   351              groups:
   352              - cloud_controller.admin
   353              - doppler.firehose
   354              - openid
   355              - routing.router_groups.read
   356              - routing.router_groups.write
   357              - scim.read
   358              - scim.write
   359          login:
   360            client_secret: "((uaa_login_client_secret))"
   361          jwt:
   362            signing_key: "((uaa_jwt_signing_key.private_key))"
   363            verification_key: "((uaa_jwt_signing_key.public_key))"
   364          clients:
   365            cc-service-dashboards:
   366              authorities: clients.read,clients.write,clients.admin
   367              authorized-grant-types: client_credentials
   368              scope: openid,cloud_controller_service_permissions.read
   369              secret: "((uaa_clients_cc-service-dashboards_secret))"
   370            cc_routing:
   371              authorities: routing.router_groups.read
   372              authorized-grant-types: client_credentials
   373              secret: "((uaa_clients_cc-routing_secret))"
   374            cf:
   375              access-token-validity: 600
   376              authorities: uaa.none
   377              authorized-grant-types: password,refresh_token
   378              override: true
   379              refresh-token-validity: 2592000
   380              scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write,doppler.firehose,uaa.user,routing.router_groups.read,routing.router_groups.write
   381            cloud_controller_username_lookup:
   382              authorities: scim.userids
   383              authorized-grant-types: client_credentials
   384              secret: "((uaa_clients_cloud_controller_username_lookup_secret))"
   385            doppler:
   386              authorities: uaa.resource
   387              override: true
   388              secret: "((uaa_clients_doppler_secret))"
   389            gorouter:
   390              authorities: routing.routes.read
   391              authorized-grant-types: client_credentials,refresh_token
   392              secret: "((uaa_clients_gorouter_secret))"
   393            ssh-proxy:
   394              authorized-grant-types: authorization_code
   395              autoapprove: true
   396              override: true
   397              redirect-uri: "/login"
   398              scope: openid,cloud_controller.read,cloud_controller.write
   399              secret: "((uaa_clients_ssh-proxy_secret))"
   400            tcp_emitter:
   401              authorities: routing.routes.write,routing.routes.read,routing.router_groups.read
   402              authorized-grant-types: client_credentials,refresh_token
   403              secret: "((uaa_clients_tcp_emitter_secret))"
   404            tcp_router:
   405              authorities: routing.routes.read,routing.router_groups.read
   406              authorized-grant-types: client_credentials,refresh_token
   407              secret: "((uaa_clients_tcp_router_secret))"
   408        uaadb:
   409          address: 10.0.31.193
   410          databases:
   411          - name: uaa
   412            tag: uaa
   413          db_scheme: mysql
   414          port: 3306
   415          roles:
   416          - name: uaa
   417            password: "((cf_mysql_mysql_seeded_databases_uaa_password))"
   418            tag: admin
   419    - name: route_registrar
   420      release: routing
   421      properties:
   422        route_registrar:
   423          routes:
   424          - health_check:
   425              name: uaa-healthcheck
   426              script_path: "/var/vcap/jobs/uaa/bin/health_check"
   427            name: uaa
   428            port: 8080
   429            registration_interval: 4s
   430            tags:
   431              component: uaa
   432            uris:
   433            - uaa.((system_domain))
   434            - "*.uaa.((system_domain))"
   435            - login.((system_domain))
   436            - "*.login.((system_domain))"
   437        nats:
   438          machines: *nats_machines
   439          password: "((nats_password))"
   440          port: 4222
   441          user: nats
   442    - name: metron_agent
   443      release: loggregator
   444      properties: *metron_agent_properties
   445    - name: statsd-injector
   446      release: loggregator
   447  - name: diego-brain
   448    azs:
   449    - z1
   450    - z2
   451    instances: 2
   452    vm_type: m3.medium
   453    vm_extensions:
   454    - ssh-proxy-lb
   455    stemcell: default
   456    networks:
   457    - name: private
   458    jobs:
   459    - name: consul_agent
   460      release: consul
   461      properties:
   462        consul:
   463          agent:
   464            mode: client
   465            domain: cf.internal
   466            servers: *consul_machines
   467          encrypt_keys:
   468          - "((consul_encrypt_key))"
   469          agent_cert: "((consul_agent.certificate))"
   470          agent_key: "((consul_agent.private_key))"
   471          ca_cert: "((consul_agent.ca))"
   472          server_cert: "((consul_server.certificate))"
   473          server_key: "((consul_server.private_key))"
   474    - name: ssh_proxy
   475      release: diego
   476      properties:
   477        diego:
   478          ssl:
   479            skip_cert_verify: true
   480          ssh_proxy:
   481            enable_cf_auth: true
   482            host_key: "((diego_ssh_proxy_host_key.private_key))"
   483            uaa_secret: "((uaa_clients_ssh-proxy_secret))"
   484            uaa_token_url: https://uaa.((system_domain))/oauth/token
   485            bbs: &diego_bbs_client_properties
   486              ca_cert: "((diego_bbs.ca))"
   487              client_cert: "((diego_bbs_client.certificate))"
   488              client_key: "((diego_bbs_client.private_key))"
   489    - name: file_server
   490      release: diego
   491    - name: auctioneer
   492      release: diego
   493      properties:
   494        diego:
   495          auctioneer:
   496            bbs: *diego_bbs_client_properties
   497    - name: metron_agent
   498      release: loggregator
   499      properties: *metron_agent_properties
   500  - name: diego-cell
   501    azs:
   502    - z1
   503    - z2
   504    instances: 2
   505    vm_type: r3.xlarge
   506    vm_extensions:
   507    - 100GB_ephemeral_disk
   508    stemcell: default
   509    networks:
   510    - name: private
   511    jobs:
   512    - name: consul_agent
   513      release: consul
   514      properties:
   515        consul:
   516          agent:
   517            mode: client
   518            domain: cf.internal
   519            servers: *consul_machines
   520          encrypt_keys:
   521          - "((consul_encrypt_key))"
   522          agent_cert: "((consul_agent.certificate))"
   523          agent_key: "((consul_agent.private_key))"
   524          ca_cert: "((consul_agent.ca))"
   525          server_cert: "((consul_server.certificate))"
   526          server_key: "((consul_server.private_key))"
   527    - name: cflinuxfs2-rootfs-setup
   528      release: cflinuxfs2-rootfs
   529    - name: garden
   530      release: garden-runc
   531      properties:
   532        garden:
   533          default_container_grace_time: 0
   534          destroy_containers_on_start: true
   535          graph_cleanup_threshold_in_mb: 0
   536          deny_networks:
   537          - 0.0.0.0/0
   538          persistent_image_list:
   539          - "/var/vcap/packages/cflinuxfs2/rootfs"
   540    - name: rep
   541      release: diego
   542      properties:
   543        diego:
   544          rep:
   545            bbs: *diego_bbs_client_properties
   546            preloaded_rootfses:
   547            - cflinuxfs2:/var/vcap/packages/cflinuxfs2/rootfs
   548          ssl:
   549            skip_cert_verify: true
   550    - name: metron_agent
   551      release: loggregator
   552      properties: *metron_agent_properties
   553  - name: router
   554    azs:
   555    - z1
   556    - z2
   557    instances: 2
   558    vm_type: m3.medium
   559    vm_extensions:
   560    - router-lb
   561    stemcell: default
   562    networks:
   563    - name: private
   564    jobs:
   565    - name: consul_agent
   566      release: consul
   567      properties:
   568        consul:
   569          agent:
   570            mode: client
   571            domain: cf.internal
   572            servers: *consul_machines
   573            services:
   574              gorouter: {}
   575          encrypt_keys:
   576          - "((consul_encrypt_key))"
   577          agent_cert: "((consul_agent.certificate))"
   578          agent_key: "((consul_agent.private_key))"
   579          ca_cert: "((consul_agent.ca))"
   580          server_cert: "((consul_server.certificate))"
   581          server_key: "((consul_server.private_key))"
   582    - name: gorouter
   583      release: routing
   584      properties:
   585        nats: *nats_properties
   586        router:
   587          enable_ssl: true
   588          ssl_cert: "((router_ssl.certificate))"
   589          ssl_key: "((router_ssl.private_key))"
   590          status:
   591            password: "((router_status_password))"
   592            user: router-status
   593          route_services_secret: "((router_route_services_secret))"
   594          ssl_skip_validation: true
   595        uaa:
   596          clients:
   597            gorouter:
   598              secret: "((uaa_clients_gorouter_secret))"
   599          ca_cert: "((uaa_ca.certificate))"
   600          ssl:
   601            port: 8443
   602    - name: metron_agent
   603      release: loggregator
   604      properties: *metron_agent_properties
   605  - name: route-emitter
   606    azs:
   607    - z1
   608    - z2
   609    instances: 2
   610    vm_type: m3.medium
   611    stemcell: default
   612    networks:
   613    - name: private
   614    jobs:
   615    - name: consul_agent
   616      release: consul
   617      properties:
   618        consul:
   619          agent:
   620            mode: client
   621            domain: cf.internal
   622            servers: *consul_machines
   623          encrypt_keys:
   624          - "((consul_encrypt_key))"
   625          agent_cert: "((consul_agent.certificate))"
   626          agent_key: "((consul_agent.private_key))"
   627          ca_cert: "((consul_agent.ca))"
   628          server_cert: "((consul_server.certificate))"
   629          server_key: "((consul_server.private_key))"
   630    - name: route_emitter
   631      release: diego
   632      properties:
   633        diego:
   634          route_emitter:
   635            nats: *nats_properties
   636            bbs:
   637              ca_cert: "((diego_bbs.ca))"
   638              client_cert: "((diego_bbs_client.certificate))"
   639              client_key: "((diego_bbs_client.private_key))"
   640              require_ssl: true
   641    - name: metron_agent
   642      release: loggregator
   643      properties: *metron_agent_properties
   644  - name: blobstore
   645    azs:
   646    - z1
   647    instances: 1
   648    vm_type: m3.large
   649    vm_extensions:
   650    - 10GB_ephemeral_disk
   651    persistent_disk_type: 100GB
   652    stemcell: default
   653    networks:
   654    - name: private
   655    jobs:
   656    - name: consul_agent
   657      release: consul
   658      properties:
   659        consul:
   660          agent:
   661            mode: client
   662            domain: cf.internal
   663            servers: *consul_machines
   664            services:
   665              blobstore: {}
   666          encrypt_keys:
   667          - "((consul_encrypt_key))"
   668          agent_cert: "((consul_agent.certificate))"
   669          agent_key: "((consul_agent.private_key))"
   670          ca_cert: "((consul_agent.ca))"
   671          server_cert: "((consul_server.certificate))"
   672          server_key: "((consul_server.private_key))"
   673    - name: blobstore
   674      release: capi
   675      properties:
   676        system_domain: "((system_domain))"
   677        blobstore:
   678          admin_users:
   679          - username: blobstore-user
   680            password: "((blobstore_admin_users_password))"
   681          secure_link:
   682            secret: "((blobstore_secure_link_secret))"
   683          tls:
   684            cert: "((blobstore_tls.certificate))"
   685            private_key: "((blobstore_tls.private_key))"
   686            ca_cert: "((blobstore_tls.ca))"
   687    - name: route_registrar
   688      release: routing
   689      properties:
   690        route_registrar:
   691          routes:
   692          - name: blobstore
   693            port: 8080
   694            registration_interval: 20s
   695            tags:
   696              component: blobstore
   697            uris:
   698            - blobstore.((system_domain))
   699        nats:
   700          machines: *nats_machines
   701          password: "((nats_password))"
   702          port: 4222
   703          user: nats
   704    - name: metron_agent
   705      release: loggregator
   706      properties: *metron_agent_properties
   707  - name: api
   708    azs:
   709    - z1
   710    - z2
   711    instances: 2
   712    vm_type: m3.large
   713    vm_extensions:
   714    - 50GB_ephemeral_disk
   715    stemcell: default
   716    networks:
   717    - name: private
   718    jobs:
   719    - name: consul_agent
   720      release: consul
   721      properties:
   722        consul:
   723          agent:
   724            mode: client
   725            domain: cf.internal
   726            servers: *consul_machines
   727            services:
   728              cloud_controller_ng: {}
   729          encrypt_keys:
   730          - "((consul_encrypt_key))"
   731          agent_cert: "((consul_agent.certificate))"
   732          agent_key: "((consul_agent.private_key))"
   733          ca_cert: "((consul_agent.ca))"
   734          server_cert: "((consul_server.certificate))"
   735          server_key: "((consul_server.private_key))"
   736    - name: cloud_controller_ng
   737      release: capi
   738      properties:
   739        router:
   740          route_services_secret: "((router_route_services_secret))"
   741        hm9000:
   742          port: -1
   743        ssl: &ssl
   744          skip_cert_verify: true
   745        system_domain: "((system_domain))"
   746        system_domain_organization: default_org
   747        app_domains: &app_domains
   748        - "((system_domain))"
   749        app_ssh: &app_ssh
   750          host_key_fingerprint: "((diego_ssh_proxy_host_key.public_key_fingerprint))"
   751          oauth_client_id: ssh-proxy
   752        nats:
   753          machines: *nats_machines
   754          password: "((nats_password))"
   755          port: 4222
   756          user: nats
   757        uaa:
   758          ca_cert: "((uaa_ssl.ca))"
   759          clients:
   760            cc_routing:
   761              secret: "((uaa_clients_cc-routing_secret))"
   762            cloud_controller_username_lookup:
   763              secret: "((uaa_clients_cloud_controller_username_lookup_secret))"
   764            cc-service-dashboards:
   765              secret: "((uaa_clients_cc-service-dashboards_secret))"
   766          url: https://uaa.((system_domain))
   767          jwt:
   768            verification_key: "((uaa_jwt_signing_key.public_key))"
   769          ssl:
   770            port: 8443
   771        cc:
   772          default_running_security_groups: &cc_default_running_security_groups
   773          - public_networks
   774          - dns
   775          default_staging_security_groups: &cc_default_staging_security_groups
   776          - public_networks
   777          - dns
   778          security_group_definitions: &cc_security_group_definitions
   779          - name: public_networks
   780            rules:
   781            - destination: 0.0.0.0-9.255.255.255
   782              protocol: all
   783            - destination: 11.0.0.0-169.253.255.255
   784              protocol: all
   785            - destination: 169.255.0.0-172.15.255.255
   786              protocol: all
   787            - destination: 172.32.0.0-192.167.255.255
   788              protocol: all
   789            - destination: 192.169.0.0-255.255.255.255
   790              protocol: all
   791          - name: dns
   792            rules:
   793            - destination: 0.0.0.0/0
   794              ports: '53'
   795              protocol: tcp
   796            - destination: 0.0.0.0/0
   797              ports: '53'
   798              protocol: udp
   799          install_buildpacks: &cc_install_buildpacks
   800          - name: binary_buildpack
   801            package: binary-buildpack
   802          - name: dotnet_core_buildpack
   803            package: dotnet-core-buildpack
   804          - name: go_buildpack
   805            package: go-buildpack
   806          - name: java_buildpack
   807            package: buildpack_java
   808          - name: nodejs_buildpack
   809            package: nodejs-buildpack
   810          - name: php_buildpack
   811            package: php-buildpack
   812          - name: python_buildpack
   813            package: python-buildpack
   814          - name: python_buildpack
   815            package: python-buildpack
   816          - name: ruby_buildpack
   817            package: ruby-buildpack
   818          - name: staticfile_buildpack
   819            package: staticfile-buildpack
   820          default_to_diego_backend: true
   821          db_encryption_key: "((cc_db_encryption_key))"
   822          bulk_api_password: "((cc_bulk_api_password))"
   823          internal_api_password: "((cc_internal_api_password))"
   824          staging_upload_user: staging_user
   825          staging_upload_password: "((cc_staging_upload_password))"
   826          quota_definitions: &quota_definitions
   827            default:
   828              memory_limit: 102400
   829              non_basic_services_allowed: true
   830              total_routes: 1000
   831              total_services: -1
   832          buildpacks: &blobstore-properties
   833            blobstore_type: webdav
   834            webdav_config:
   835              blobstore_timeout: 5
   836              password: "((blobstore_admin_users_password))"
   837              private_endpoint: https://blobstore.service.cf.internal:4443
   838              public_endpoint: https://blobstore.((system_domain))
   839              username: blobstore-user
   840          resource_pool: *blobstore-properties
   841          packages: *blobstore-properties
   842          droplets: *blobstore-properties
   843          mutual_tls:
   844            ca_cert: "((diego_bbs.certificate))"
   845            public_cert: "((cc_tls.certificate))"
   846            private_key: "((cc_tls.private_key))"
   847        ccdb: &ccdb
   848          databases:
   849          - name: cloud_controller
   850            tag: cc
   851          address: 10.0.31.193
   852          db_scheme: mysql
   853          port: 3306
   854          roles:
   855          - name: cloud_controller
   856            password: "((cf_mysql_mysql_seeded_databases_cc_password))"
   857            tag: admin
   858    - name: cloud_controller_worker
   859      release: capi
   860      properties:
   861        hm9000:
   862          port: -1
   863        cc:
   864          db_encryption_key: "((cc_db_encryption_key))"
   865          default_to_diego_backend: true
   866          install_buildpacks: *cc_install_buildpacks
   867          default_running_security_groups: *cc_default_running_security_groups
   868          default_staging_security_groups: *cc_default_staging_security_groups
   869          security_group_definitions: *cc_security_group_definitions
   870          internal_api_password: "((cc_internal_api_password))"
   871          bulk_api_password: "((cc_bulk_api_password))"
   872          quota_definitions: *quota_definitions
   873          staging_upload_user: staging_user
   874          staging_upload_password: "((cc_staging_upload_password))"
   875          resource_pool: *blobstore-properties
   876          packages: *blobstore-properties
   877          droplets: *blobstore-properties
   878          buildpacks: *blobstore-properties
   879        ccdb: *ccdb
   880        ssl: *ssl
   881        system_domain: "((system_domain))"
   882        system_domain_organization: default_org
   883        app_domains: *app_domains
   884        app_ssh: *app_ssh
   885        nats:
   886          machines: *nats_machines
   887          password: "((nats_password))"
   888          port: 4222
   889          user: nats
   890        uaa:
   891          ca_cert: "((uaa_ssl.ca))"
   892          clients:
   893            cc-service-dashboards:
   894              secret: "((uaa_clients_cc-service-dashboards_secret))"
   895          url: https://uaa.((system_domain))
   896          jwt:
   897            verification_key: "((uaa_jwt_signing_key.public_key))"
   898          ssl:
   899            port: 8443
   900    - name: binary-buildpack
   901      release: binary-buildpack
   902    - name: dotnet-core-buildpack
   903      release: dotnet-core-buildpack
   904    - name: go-buildpack
   905      release: go-buildpack
   906    - name: java-buildpack
   907      release: java-buildpack
   908    - name: java-offline-buildpack
   909      release: java-offline-buildpack
   910    - name: nodejs-buildpack
   911      release: nodejs-buildpack
   912    - name: php-buildpack
   913      release: php-buildpack
   914    - name: python-buildpack
   915      release: python-buildpack
   916    - name: ruby-buildpack
   917      release: ruby-buildpack
   918    - name: staticfile-buildpack
   919      release: staticfile-buildpack
   920    - name: route_registrar
   921      release: routing
   922      properties:
   923        route_registrar:
   924          routes:
   925          - name: api
   926            registration_interval: 20s
   927            port: 9022
   928            uris:
   929            - api.((system_domain))
   930        nats:
   931          machines: *nats_machines
   932          password: "((nats_password))"
   933          port: 4222
   934          user: nats
   935    - name: statsd-injector
   936      release: loggregator
   937    - name: metron_agent
   938      release: loggregator
   939      properties: *metron_agent_properties
   940  - name: cc_clock
   941    azs:
   942    - z1
   943    instances: 1
   944    vm_type: m3.large
   945    vm_extensions:
   946    - 5GB_ephemeral_disk
   947    stemcell: default
   948    networks:
   949    - name: private
   950    jobs:
   951    - name: consul_agent
   952      release: consul
   953      properties:
   954        consul:
   955          agent:
   956            mode: client
   957            domain: cf.internal
   958            servers: *consul_machines
   959          encrypt_keys:
   960          - "((consul_encrypt_key))"
   961          agent_cert: "((consul_agent.certificate))"
   962          agent_key: "((consul_agent.private_key))"
   963          ca_cert: "((consul_agent.ca))"
   964          server_cert: "((consul_server.certificate))"
   965          server_key: "((consul_server.private_key))"
   966    - name: cloud_controller_clock
   967      release: capi
   968      properties:
   969        hm9000:
   970          port: -1
   971        cc:
   972          db_encryption_key: "((cc_db_encryption_key))"
   973          default_to_diego_backend: true
   974          install_buildpacks: *cc_install_buildpacks
   975          default_running_security_groups: *cc_default_running_security_groups
   976          default_staging_security_groups: *cc_default_staging_security_groups
   977          security_group_definitions: *cc_security_group_definitions
   978          internal_api_password: "((cc_internal_api_password))"
   979          bulk_api_password: "((cc_bulk_api_password))"
   980          quota_definitions: *quota_definitions
   981          staging_upload_user: staging_user
   982          staging_upload_password: "((cc_staging_upload_password))"
   983          resource_pool: *blobstore-properties
   984          packages: *blobstore-properties
   985          droplets: *blobstore-properties
   986          buildpacks: *blobstore-properties
   987        ccdb: *ccdb
   988        ssl: *ssl
   989        system_domain: "((system_domain))"
   990        system_domain_organization: default_org
   991        app_domains: *app_domains
   992        app_ssh: *app_ssh
   993        nats:
   994          machines: *nats_machines
   995          password: "((nats_password))"
   996          port: 4222
   997          user: nats
   998        uaa:
   999          ca_cert: "((uaa_ssl.ca))"
  1000          clients:
  1001            cc-service-dashboards:
  1002              secret: "((uaa_clients_cc-service-dashboards_secret))"
  1003          url: https://uaa.((system_domain))
  1004          jwt:
  1005            verification_key: "((uaa_jwt_signing_key.public_key))"
  1006          ssl:
  1007            port: 8443
  1008    - name: statsd-injector
  1009      release: loggregator
  1010    - name: metron_agent
  1011      release: loggregator
  1012      properties: *metron_agent_properties
  1013  - name: cc_bridge
  1014    azs:
  1015    - z1
  1016    - z2
  1017    instances: 2
  1018    vm_type: m3.medium
  1019    vm_extensions:
  1020    - 5GB_ephemeral_disk
  1021    stemcell: default
  1022    networks:
  1023    - name: private
  1024    jobs:
  1025    - name: consul_agent
  1026      release: consul
  1027      properties:
  1028        consul:
  1029          agent:
  1030            mode: client
  1031            domain: cf.internal
  1032            servers: *consul_machines
  1033          encrypt_keys:
  1034          - "((consul_encrypt_key))"
  1035          agent_cert: "((consul_agent.certificate))"
  1036          agent_key: "((consul_agent.private_key))"
  1037          ca_cert: "((consul_agent.ca))"
  1038          server_cert: "((consul_server.certificate))"
  1039          server_key: "((consul_server.private_key))"
  1040    - name: stager
  1041      release: capi
  1042      properties:
  1043        diego:
  1044          ssl: *ssl
  1045        capi:
  1046          stager:
  1047            bbs: *diego_bbs_client_properties
  1048            cc:
  1049              basic_auth_password: "((cc_internal_api_password))"
  1050    - name: nsync
  1051      release: capi
  1052      properties:
  1053        diego:
  1054          ssl: *ssl
  1055        capi:
  1056          nsync:
  1057            bbs: *diego_bbs_client_properties
  1058            cc:
  1059              basic_auth_password: "((cc_internal_api_password))"
  1060              base_url: https://api.((system_domain))
  1061            diego_privileged_containers: true
  1062    - name: tps
  1063      release: capi
  1064      properties:
  1065        diego:
  1066          ssl: *ssl
  1067        capi:
  1068          tps:
  1069            bbs: *diego_bbs_client_properties
  1070            cc:
  1071              basic_auth_password: "((cc_internal_api_password))"
  1072    - name: cc_uploader
  1073      release: capi
  1074      properties:
  1075        diego:
  1076          ssl: *ssl
  1077    - name: metron_agent
  1078      release: loggregator
  1079      properties: *metron_agent_properties
  1080  - name: doppler
  1081    azs:
  1082    - z1
  1083    - z2
  1084    instances: 2
  1085    vm_type: m3.medium
  1086    vm_extensions:
  1087    - 5GB_ephemeral_disk
  1088    stemcell: default
  1089    networks:
  1090    - name: private
  1091    jobs:
  1092    - name: consul_agent
  1093      release: consul
  1094      properties:
  1095        consul:
  1096          agent:
  1097            mode: client
  1098            domain: cf.internal
  1099            servers: *consul_machines
  1100            services:
  1101              doppler:
  1102                name: doppler
  1103          encrypt_keys:
  1104          - "((consul_encrypt_key))"
  1105          agent_cert: "((consul_agent.certificate))"
  1106          agent_key: "((consul_agent.private_key))"
  1107          ca_cert: "((consul_agent.ca))"
  1108          server_cert: "((consul_server.certificate))"
  1109          server_key: "((consul_server.private_key))"
  1110    - name: doppler
  1111      release: loggregator
  1112      properties:
  1113        doppler:
  1114          etcd:
  1115            client_cert: "((etcd_client.certificate))"
  1116            client_key: "((etcd_client.private_key))"
  1117          syslog_skip_cert_verify: true
  1118          tls:
  1119            enable: true
  1120        loggregator:
  1121          tls:
  1122            ca_cert: "((loggregator_ca.certificate))"
  1123            trafficcontroller:
  1124              cert: "((loggregator_tls_tc.certificate))"
  1125              key: "((loggregator_tls_tc.private_key))"
  1126            doppler:
  1127              cert: "((loggregator_tls_doppler.certificate))"
  1128              key: "((loggregator_tls_doppler.private_key))"
  1129          etcd:
  1130            require_ssl: true
  1131            ca_cert: "((etcd_server.ca))"
  1132            machines:
  1133            - etcd.service.cf.internal
  1134        doppler_endpoint:
  1135          shared_secret: "((dropsonde_shared_secret))"
  1136    - name: syslog_drain_binder
  1137      release: loggregator
  1138      properties:
  1139        loggregator:
  1140          tls:
  1141            ca_cert: "((loggregator_ca.certificate))"
  1142            trafficcontroller:
  1143              cert: "((loggregator_tls_tc.certificate))"
  1144              key: "((loggregator_tls_tc.private_key))"
  1145            doppler:
  1146              cert: "((loggregator_tls_doppler.certificate))"
  1147              key: "((loggregator_tls_doppler.private_key))"
  1148          etcd:
  1149            require_ssl: true
  1150            ca_cert: "((etcd_server.ca))"
  1151            machines:
  1152            - etcd.service.cf.internal
  1153        syslog_drain_binder:
  1154          etcd:
  1155            client_cert: "((etcd_client.certificate))"
  1156            client_key: "((etcd_client.private_key))"
  1157        system_domain: "((system_domain))"
  1158        cc:
  1159          bulk_api_password: "((cc_bulk_api_password))"
  1160          srv_api_uri: https://api.((system_domain))
  1161        ssl: *ssl
  1162    - name: metron_agent
  1163      release: loggregator
  1164      properties: *metron_agent_properties
  1165  - name: log_controller
  1166    azs:
  1167    - z1
  1168    - z2
  1169    instances: 2
  1170    vm_type: t2.small
  1171    vm_extensions:
  1172    - 5GB_ephemeral_disk
  1173    stemcell: default
  1174    update:
  1175      max_in_flight: 1
  1176      serial: true
  1177    networks:
  1178    - name: private
  1179    jobs:
  1180    - name: consul_agent
  1181      release: consul
  1182      properties:
  1183        consul:
  1184          agent:
  1185            mode: client
  1186            domain: cf.internal
  1187            servers: *consul_machines
  1188            services:
  1189              loggregator_trafficcontroller: {}
  1190          encrypt_keys:
  1191          - "((consul_encrypt_key))"
  1192          agent_cert: "((consul_agent.certificate))"
  1193          agent_key: "((consul_agent.private_key))"
  1194          ca_cert: "((consul_agent.ca))"
  1195          server_cert: "((consul_server.certificate))"
  1196          server_key: "((consul_server.private_key))"
  1197    - name: loggregator_trafficcontroller
  1198      release: loggregator
  1199      properties:
  1200        traffic_controller:
  1201          etcd:
  1202            client_cert: "((etcd_client.certificate))"
  1203            client_key: "((etcd_client.private_key))"
  1204        uaa:
  1205          clients:
  1206            doppler:
  1207              secret: "((uaa_clients_doppler_secret))"
  1208          url: https://uaa.((system_domain))
  1209        loggregator:
  1210          tls:
  1211            ca_cert: "((loggregator_ca.certificate))"
  1212            trafficcontroller:
  1213              cert: "((loggregator_tls_tc.certificate))"
  1214              key: "((loggregator_tls_tc.private_key))"
  1215            doppler:
  1216              cert: "((loggregator_tls_doppler.certificate))"
  1217              key: "((loggregator_tls_doppler.private_key))"
  1218          etcd:
  1219            require_ssl: true
  1220            ca_cert: "((etcd_server.ca))"
  1221            machines:
  1222            - etcd.service.cf.internal
  1223        system_domain: "((system_domain))"
  1224        ssl: *ssl
  1225        cc:
  1226          srv_api_uri: https://api.((system_domain))
  1227    - name: route_registrar
  1228      release: routing
  1229      properties:
  1230        route_registrar:
  1231          routes:
  1232          - name: loggregator
  1233            port: 8080
  1234            registration_interval: 20s
  1235            uris:
  1236            - loggregator.((system_domain))
  1237          - name: doppler
  1238            port: 8081
  1239            registration_interval: 20s
  1240            uris:
  1241            - doppler.((system_domain))
  1242            - "*.doppler.((system_domain))"
  1243        nats:
  1244          machines: *nats_machines
  1245          password: "((nats_password))"
  1246          port: 4222
  1247          user: nats
  1248    - name: metron_agent
  1249      release: loggregator
  1250      properties: *metron_agent_properties
  1251  
  1252  variables:
  1253  - name: blobstore_admin_users_password
  1254    type: password
  1255  - name: blobstore_secure_link_secret
  1256    type: password
  1257  - name: cc_bulk_api_password
  1258    type: password
  1259  - name: cc_db_encryption_key
  1260    type: password
  1261  - name: cc_internal_api_password
  1262    type: password
  1263  - name: cc_staging_upload_password
  1264    type: password
  1265  - name: cf_mysql_mysql_admin_password
  1266    type: password
  1267  - name: cf_mysql_mysql_cluster_health_password
  1268    type: password
  1269  - name: cf_mysql_mysql_galera_healthcheck_endpoint_password
  1270    type: password
  1271  - name: cf_mysql_mysql_galera_healthcheck_password
  1272    type: password
  1273  - name: cf_mysql_mysql_roadmin_password
  1274    type: password
  1275  - name: cf_mysql_mysql_seeded_databases_cc_password
  1276    type: password
  1277  - name: cf_mysql_mysql_seeded_databases_diego_password
  1278    type: password
  1279  - name: cf_mysql_mysql_seeded_databases_uaa_password
  1280    type: password
  1281  - name: nats_password
  1282    type: password
  1283  - name: router_status_password
  1284    type: password
  1285  - name: cf_admin_password
  1286    type: password
  1287  - name: dropsonde_shared_secret
  1288    type: password
  1289  - name: router_route_services_secret
  1290    type: password
  1291  - name: uaa_admin_client_secret
  1292    type: password
  1293  - name: uaa_clients_cc-routing_secret
  1294    type: password
  1295  - name: uaa_clients_cc-service-dashboards_secret
  1296    type: password
  1297  - name: uaa_clients_cloud_controller_username_lookup_secret
  1298    type: password
  1299  - name: uaa_clients_doppler_secret
  1300    type: password
  1301  - name: uaa_clients_gorouter_secret
  1302    type: password
  1303  - name: uaa_clients_ssh-proxy_secret
  1304    type: password
  1305  - name: uaa_clients_tcp_emitter_secret
  1306    type: password
  1307  - name: uaa_clients_tcp_router_secret
  1308    type: password
  1309  - name: uaa_login_client_secret
  1310    type: password
  1311  - name: diego_bbs_encryption_keys_passphrase
  1312    type: password
  1313  - name: consul_encrypt_key
  1314    type: password
  1315  - name: diego_ssh_proxy_host_key
  1316    type: ssh
  1317  - name: uaa_jwt_signing_key
  1318    type: rsa
  1319  - name: etcd_ca
  1320    type: certificate
  1321    options:
  1322      common_name: etcdCA
  1323      is_ca: true
  1324  - name: etcd_server
  1325    type: certificate
  1326    options:
  1327      ca: etcd_ca
  1328      common_name: etcd.service.cf.internal
  1329      alternative_names:
  1330      - "*.etcd.service.cf.internal"
  1331      - etcd.service.cf.internal
  1332      extended_key_usage:
  1333      - server_auth
  1334  - name: etcd_client
  1335    type: certificate
  1336    options:
  1337      ca: etcd_ca
  1338      common_name: clientName
  1339      extended_key_usage:
  1340      - client_auth
  1341  - name: etcd_peer_ca
  1342    type: certificate
  1343    options:
  1344      common_name: peerCA
  1345      is_ca: true
  1346  - name: etcd_peer
  1347    type: certificate
  1348    options:
  1349      ca: etcd_peer_ca
  1350      common_name: etcd.service.cf.internal
  1351      alternative_names:
  1352      - "*.etcd.service.cf.internal"
  1353      - etcd.service.cf.internal
  1354      extended_key_usage:
  1355      - client_auth
  1356      - server_auth
  1357  - name: blobstore_ca
  1358    type: certificate
  1359    options:
  1360      common_name: blobstore_ca
  1361      is_ca: true
  1362  - name: blobstore_tls
  1363    type: certificate
  1364    options:
  1365      ca: blobstore_ca
  1366      common_name: blobstore.service.cf.internal
  1367  - name: consul_agent_ca
  1368    type: certificate
  1369    options:
  1370      common_name: consulCA
  1371      is_ca: true
  1372  - name: consul_agent
  1373    type: certificate
  1374    options:
  1375      ca: consul_agent_ca
  1376      common_name: consul_agent
  1377      extended_key_usage:
  1378      - client_auth
  1379      - server_auth
  1380  - name: consul_server
  1381    type: certificate
  1382    options:
  1383      ca: consul_agent_ca
  1384      common_name: server.dc1.cf.internal
  1385      extended_key_usage:
  1386      - client_auth
  1387      - server_auth
  1388  - name: diego_bbs
  1389    type: certificate
  1390    options:
  1391      common_name: diegoCA
  1392      is_ca: true
  1393  - name: diego_bbs_client
  1394    type: certificate
  1395    options:
  1396      ca: diego_bbs
  1397      common_name: bbs client
  1398      extended_key_usage:
  1399      - client_auth
  1400  - name: diego_bbs_server
  1401    type: certificate
  1402    options:
  1403      ca: diego_bbs
  1404      common_name: bbs.service.cf.internal
  1405      extended_key_usage:
  1406      - server_auth
  1407      alternative_names:
  1408      - "*.bbs.service.cf.internal"
  1409      - bbs.service.cf.internal
  1410  - name: loggregator_ca
  1411    type: certificate
  1412    options:
  1413      common_name: loggregatorCA
  1414      is_ca: true
  1415  - name: metron_agent_tls_client
  1416    type: certificate
  1417    options:
  1418      ca: loggregator_ca
  1419      common_name: metron_agent
  1420      extended_key_usage:
  1421      - client_auth
  1422  - name: loggregator_tls_doppler
  1423    type: certificate
  1424    options:
  1425      ca: loggregator_ca
  1426      common_name: doppler
  1427      extended_key_usage:
  1428      - server_auth
  1429  - name: loggregator_tls_tc
  1430    type: certificate
  1431    options:
  1432      ca: loggregator_ca
  1433      common_name: trafficcontroller
  1434      extended_key_usage:
  1435      - client_auth
  1436  - name: router_ca
  1437    type: certificate
  1438    options:
  1439      common_name: routerCA
  1440      is_ca: true
  1441  - name: router_ssl
  1442    type: certificate
  1443    options:
  1444      ca: router_ca
  1445      common_name: routerSSL
  1446      alternative_names:
  1447      - "((system_domain))"
  1448  - name: uaa_ca
  1449    type: certificate
  1450    options:
  1451      common_name: uaaCA
  1452      is_ca: true
  1453  - name: uaa_ssl
  1454    type: certificate
  1455    options:
  1456      ca: uaa_ca
  1457      common_name: uaa.service.cf.internal
  1458      alternative_names:
  1459      - uaa.service.cf.internal
  1460  - name: uaa_login_saml
  1461    type: certificate
  1462    options:
  1463      common_name: uaa_login_saml
  1464      is_ca: true
  1465  - name: cc_tls
  1466    type: certificate
  1467    options:
  1468      ca: diego_bbs
  1469      common_name: cloud-controller-ng.service.cf.internal
  1470      extended_key_usage:
  1471        - client_auth
  1472        - server_auth
  1473  
  1474  releases:
  1475  - name: capi
  1476    url: https://bosh.io/d/github.com/cloudfoundry/capi-release?v=1.15.0
  1477    version: 1.15.0
  1478    sha1: 2008137d5bb71e701cedba96cb363e1bfbdebd45
  1479  - name: consul
  1480    url: https://bosh.io/d/github.com/cloudfoundry-incubator/consul-release?v=145
  1481    version: '145'
  1482    sha1: fa6d73d72465ec4c2e35bd5c1c75d733c30d8ce1
  1483  - name: diego
  1484    url: https://bosh.io/d/github.com/cloudfoundry/diego-release?v=1.4.0
  1485    version: 1.4.0
  1486    sha1: 2b209e2b84c232942f6d929200e397d68bb682f6
  1487  - name: etcd
  1488    url: https://bosh.io/d/github.com/cloudfoundry-incubator/etcd-release?v=87
  1489    version: '87'
  1490    sha1: 887fd8de829c82b3427e63ff9d06882a90c3ef81
  1491  - name: loggregator
  1492    url: https://bosh.io/d/github.com/cloudfoundry/loggregator?v=70
  1493    version: '70'
  1494    sha1: 7b6c65893c0bb46ac7b164803f1cc13b4293eb70
  1495  - name: nats
  1496    url: https://bosh.io/d/github.com/cloudfoundry/nats-release?v=14
  1497    version: '14'
  1498    sha1: 495cdd240a00ef4afa7ca367dbf3a2cc2624c8d0
  1499  - name: cf-mysql
  1500    url: https://bosh.io/d/github.com/cloudfoundry/cf-mysql-release?v=32
  1501    version: '32'
  1502    sha1: a41bb2cadd4311bc9977ccc2c1fca07ba41ccef2
  1503  - name: routing
  1504    url: https://bosh.io/d/github.com/cloudfoundry-incubator/cf-routing-release?v=0.142.0
  1505    version: 0.142.0
  1506    sha1: 8d5e4020b9448ff4a02809e246cc0cb6231bbc60
  1507  - name: uaa
  1508    url: https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=24
  1509    version: '24'
  1510    sha1: d0feb5494153217f3d62b346f426ad2b2f43511a
  1511  - name: garden-runc
  1512    url: https://bosh.io/d/github.com/cloudfoundry/garden-runc-release?v=1.0.4
  1513    version: 1.0.4
  1514    sha1: ef218cc8cc2ea5a874a59becabdf957e52976939
  1515  - name: cflinuxfs2-rootfs
  1516    url: https://bosh.io/d/github.com/cloudfoundry/cflinuxfs2-rootfs-release?v=1.44.0
  1517    version: 1.44.0
  1518    sha1: 665fdadc14d26cc150f64e80b7d3dc9d9450e2a2
  1519  - name: binary-buildpack
  1520    url: https://bosh.io/d/github.com/cloudfoundry/binary-buildpack-release?v=1.0.5
  1521    version: 1.0.5
  1522    sha1: 444b244577d726c1dd6f1ae1bb2b0ca373ed9a83
  1523  - name: dotnet-core-buildpack
  1524    url: https://bosh.io/d/github.com/cloudfoundry/dotnet-core-buildpack-release?v=1.0.3
  1525    version: 1.0.3
  1526    sha1: db5de497c7efb6d2eadfc7f5bb99b5d898b04b02
  1527  - name: go-buildpack
  1528    url: https://bosh.io/d/github.com/cloudfoundry/go-buildpack-release?v=1.7.16
  1529    version: 1.7.16
  1530    sha1: f22b670084d065e28033d18d4a2a26bff2ddbd3a
  1531  - name: java-buildpack
  1532    url: https://bosh.io/d/github.com/cloudfoundry/java-buildpack-release?v=3.10
  1533    version: '3.10'
  1534    sha1: c771f9d725485aed8e52da1d76bc08acb97b3a83
  1535  - name: java-offline-buildpack
  1536    url: https://bosh.io/d/github.com/cloudfoundry/java-offline-buildpack-release?v=3.10
  1537    version: '3.10'
  1538    sha1: cfcfc1d8c891fff6eebfc9cf625f941628035dfe
  1539  - name: nodejs-buildpack
  1540    url: https://bosh.io/d/github.com/cloudfoundry/nodejs-buildpack-release?v=1.5.24
  1541    version: 1.5.24
  1542    sha1: 4e79f80cddfb2c18c466be6cdd7eda81a42bf6cd
  1543  - name: php-buildpack
  1544    url: https://bosh.io/d/github.com/cloudfoundry/php-buildpack-release?v=4.3.23
  1545    version: 4.3.23
  1546    sha1: a2ad80ce51fb4b6087d2d375650df6ed4da5af05
  1547  - name: python-buildpack
  1548    url: https://bosh.io/d/github.com/cloudfoundry/python-buildpack-release?v=1.5.13
  1549    version: 1.5.13
  1550    sha1: 56ebdf2105143a094407c5211aa817b6f7d3d17f
  1551  - name: ruby-buildpack
  1552    url: https://bosh.io/d/github.com/cloudfoundry/ruby-buildpack-release?v=1.6.29
  1553    version: 1.6.29
  1554    sha1: 5f5f6e47e662d0045651166ffa58a73c474e9388
  1555  - name: staticfile-buildpack
  1556    url: https://bosh.io/d/github.com/cloudfoundry/staticfile-buildpack-release?v=1.3.14
  1557    version: 1.3.14
  1558    sha1: cd42fe098acf22e5fbeee6e34cbd566cd4f093ae
  1559  stemcells:
  1560  - alias: default
  1561    os: ubuntu-trusty
  1562    version: '3312.51'