Adds properties and variables for bosh-dns in standalone manifest
@@ -21,6 +21,32 @@ addons:
jobs:
- name: bosh-dns
release: bosh-dns
+ properties:
+ api:
+ client:
+ tls:
+ ca: ((dns_api_tls_ca.certificate))
+ certificate: ((dns_api_client_tls.certificate))
+ private_key: ((dns_api_client_tls.private_key))
+ server:
+ tls:
+ ca: ((dns_api_tls_ca.certificate))
+ certificate: ((dns_api_server_tls.certificate))
+ private_key: ((dns_api_server_tls.private_key))
+ cache:
+ enabled: true
+ health:
+ enabled: true
+ server:
+ tls:
+ ca: ((dns_healthcheck_tls_ca.certificate))
+ certificate: ((dns_healthcheck_server_tls.certificate))
+ private_key: ((dns_healthcheck_server_tls.private_key))
+ client:
+ tls:
+ ca: ((dns_healthcheck_tls_ca.certificate))
+ certificate: ((dns_healthcheck_client_tls.certificate))
+ private_key: ((dns_healthcheck_client_tls.private_key))
instance_groups:
- name: doppler
@@ -172,6 +198,44 @@ variables:
extended_key_usage:
- client_auth
- server_auth
+- name: dns_api_tls_ca
+ options:
+ common_name: dnsApiTlsCa
+ is_ca: true
+ type: certificate
+- name: dns_api_client_tls
+ options:
+ ca: dns_api_tls_ca
+ common_name: api.bosh-dns
+ extended_key_usage:
+ - client_auth
+ type: certificate
+- name: dns_api_server_tls
+ options:
+ ca: dns_api_tls_ca
+ common_name: api.bosh-dns
+ extended_key_usage:
+ - server_auth
+ type: certificate
+- name: dns_healthcheck_tls_ca
+ type: certificate
+ options:
+ common_name: dnsHealthCheckTlsCa
+ is_ca: true
+- name: dns_healthcheck_server_tls
+ type: certificate
+ options:
+ ca: dns_healthcheck_tls_ca
+ common_name: health.bosh-dns
+ extended_key_usage:
+ - server_auth
+- name: dns_healthcheck_client_tls
+ type: certificate
+ options:
+ ca: dns_healthcheck_tls_ca
+ common_name: health.bosh-dns
+ extended_key_usage:
+ - client_auth
update:
canaries: 10
