add-metric-store-to-cfd.yml

---
- type: replace
  path: /releases/-
  value:
    name: metric-store
    version: latest

- type: replace
  path: /instance_groups/-
  value:
    name: metric-store
    azs:
    - z1
    instances: 1
    persistent_disk_type: 10GB
    vm_type: minimal
    stemcell: default
    networks:
    - name: default
    jobs:
    - name: metric-store
      release: metric-store
      provides:
        metric-store: {shared: true, as: metric-store}
      properties:
        replication_factor: 1
        tls:
          ca_cert: ((metric_store.ca))
          cert: ((metric_store.certificate))
          key: ((metric_store.private_key))
        metric_store_server:
          tls:
            ca_cert: ((metric_store_server.ca))
            cert: ((metric_store_server.certificate))
            key: ((metric_store_server.private_key))
        metric_store_internode:
          tls:
            ca_cert: ((metric_store_internode.ca))
            cert: ((metric_store_internode.certificate))
            key: ((metric_store_internode.private_key))
        metric_store_metrics_server:
          tls:
            ca_cert: ((metric_store_metrics_server.ca))
            cert: ((metric_store_metrics_server.certificate))
            key: ((metric_store_metrics_server.private_key))
        metric_store_metrics_client:
          tls:
            ca_cert: ((metric_store_metrics_client.ca))
            cert: ((metric_store_metrics_client.certificate))
            key: ((metric_store_metrics_client.private_key))
    - name: metric-store-nozzle
      release: metric-store
      provides:
        metric-store-nozzle: {as: metric-store-nozzle}
      consumes:
        reverse_log_proxy: {from: reverse_log_proxy, deployment: cf}
        metric-store: {from: metric-store}
      properties:
        shard_id: metric-store
        metric_store_client:
          tls:
            ca_cert: ((nozzle_to_metric_store_client.ca))
            cert: ((nozzle_to_metric_store_client.certificate))
            key: ((nozzle_to_metric_store_client.private_key))
        metric_store_metrics:
          tls:
            ca_cert: ((metric_store_metrics_server.ca))
            cert: ((metric_store_metrics_server.certificate))
            key: ((metric_store_metrics_server.private_key))
        logs_provider:
          tls:
            ca_cert: ((metric_store_to_logs_provider.ca))
            cert: ((metric_store_to_logs_provider.certificate))
            key: ((metric_store_to_logs_provider.private_key))
    - name: route_registrar
      release: routing
      properties:
        route_registrar:
          routes:
          - name: metric-store-reverse-proxy
            port: 8083
            tls_port: 8083
            registration_interval: 20s
            server_cert_domain_san: metric-store.((system_domain))
            uris:
            - metric-store.((system_domain))
            - "*.metric-store.((system_domain))"
            health_check:
              name: metric-store-health
              script_path: /var/vcap/jobs/metric-store/bin/health-check.sh
              timeout: 2s
    - name: metric-store-cf-auth-proxy
      release: metric-store
      provides:
        metric-store-cf-auth-proxy: {as: metric-store-cf-auth-proxy}
      consumes:
        cloud_controller: {from: cloud_controller, deployment: cf}
        metric-store: {from: metric-store}
      properties:
        cc:
          ca_cert: ((service_cf_internal_ca.certificate))
          common_name: cloud-controller-ng.service.cf.internal
        proxy_ca_cert: "((metric_store_ca.certificate))"
        proxy_port: 8083
        external_cert: ((metric_store_ssl.certificate))
        external_key: ((metric_store_ssl.private_key))
        uaa:
          ca_cert: ((uaa_ca.certificate))
          client_id: doppler
          client_secret: ((uaa_clients_doppler_secret))
          internal_addr: https://uaa.service.cf.internal:8443
        metric_store_client:
          tls:
            cert: ((metric_store.certificate))
            key: ((metric_store.private_key))
        metric_store_metrics:
          tls:
            ca_cert: ((metric_store_metrics_server.ca))
            cert: ((metric_store_metrics_server.certificate))
            key: ((metric_store_metrics_server.private_key))

- type: replace
  path: /variables/-
  value:
    name: metric_store_to_logs_provider
    type: certificate
    options:
      ca: loggregator_ca
      common_name: metric-store
      alternative_names:
      - metric-store
      extended_key_usage:
      - client_auth
      - server_auth

- type: replace
  path: /variables/-
  value:
    name: metric_store_ca
    type: certificate
    options:
      is_ca: true
      common_name: metric-store
      alternative_names:
      - metric-store

- type: replace
  path: /variables/-
  value:
    name: metric_scraper_ca
    type: certificate
    options:
      is_ca: true
      common_name: metricScraperCA

- type: replace
  path: /variables/-
  value:
    name: metric_store
    type: certificate
    options:
      ca: metric_store_ca
      common_name: localhost
      alternative_names:
      - localhost
      - metric-store
      - metric_store
      - metricstore
      - ms
      extended_key_usage:
      - client_auth
      - server_auth

- type: replace
  path: /variables/-
  value:
    name: metric_store_internode
    type: certificate
    options:
      ca: metric_store_ca
      common_name: metric-store
      alternative_names:
      - metric-store
      extended_key_usage:
      - client_auth
      - server_auth

- type: replace
  path: /variables/-
  value:
    name: metric_store_server
    type: certificate
    options:
      ca: metric_store_ca
      common_name: metric-store
      alternative_names:
      - metric-store
      extended_key_usage:
      - server_auth

- type: replace
  path: /variables/-
  value:
    name: nozzle_to_metric_store_client
    type: certificate
    options:
      ca: metric_store_ca
      common_name: metric-store
      alternative_names:
      - metric-store
      extended_key_usage:
      - client_auth

- type: replace
  path: /variables/-
  value:
    name: metric_store_ssl
    type: certificate
    options:
      ca: service_cf_internal_ca
      common_name: metric-store
      alternative_names:
      - metric-store
      - metric-store.((system_domain))
      - '*.metric-store.((system_domain))'

- type: replace
  path: /variables/-
  value:
    name: metric_store_proxy_tls
    type: certificate
    options:
      ca: metric_store_ca
      common_name: localhost
      alternative_names:
      - localhost

- type: replace
  path: /variables/-
  value:
    name: metric_store_metrics_server
    type: certificate
    options:
      ca: metric_scraper_ca
      common_name: metric-store
      alternative_names:
      - metric-store

- type: replace
  path: /variables/-
  value:
    name: metric_store_metrics_client
    type: certificate
    options:
      ca: metric_scraper_ca
      common_name: metric-store-client
      alternative_names:
      - metric-store-client