Skip to content

log-cache-cf-auth-proxy job from log-cache/3.2.3

Github source: 360d8791 or master branch

Properties

cache_expiration_interval

The expiration lifetime assigned to new cache entries

Default
60s

cc

ca_cert

The CA for the internal api

common_name

The CN for the CA cert

override_address

Override as alternative to using CC link

external_cert

The TLS cert for the auth proxy

external_key

The TLS key for the auth proxy

logging

format

timestamp

Format for timestamp in component logs. Valid values are ‘deprecated’ and ‘rfc3339’.

Default
deprecated

metrics

ca_cert

TLS CA cert to verify requests to metrics endpoint.

cert

TLS certificate for metrics server signed by the metrics CA

debug

Enables go_ and process_ metrics along with a pprof endpoint

Default
false

key

TLS private key for metrics server signed by the metrics CA

port

The port for the auth proxy to bind a health endpoint

Default
6065

pprof_port

If debug metrics is enabled, pprof will start at this port, ideally set to something other then 0

Default
0

server_name

The server name used in the scrape configuration for the metrics endpoint

proxy_ca_cert

The CA used to sign the certificates that the reverse proxy uses to talk to the gateway

proxy_port

The port for the cf-auth-proxy to listen on

security_event_log

When provided, the path to a file where security events will be logged

skip_cert_verify

Whether to accept invalid certs

Default
false

token_pruning_interval

The interval at which expired tokens are purged from the cache

Default
60s

uaa

ca_cert

The CA for internal UAA api

client_id

The client id to authenticate to UAA

client_secret

The client secret to authenticate to UAA

internal_addr

The endpoint used for the internal UAA api

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/log-cache-cf-auth-proxy/ directory (learn more).

  • config/bpm.yml (from bpm.yml.erb)
  • config/certs/cc_ca.crt (from cc_ca.crt.erb)
  • config/certs/external.crt (from external.crt.erb)
  • config/certs/external.key (from external.key.erb)
  • config/certs/metrics.crt (from metrics.crt.erb)
  • config/certs/metrics.key (from metrics.key.erb)
  • config/certs/metrics_ca.crt (from metrics_ca.crt.erb)
  • config/certs/proxy_ca.crt (from proxy_ca.crt.erb)
  • config/certs/uaa_ca.crt (from uaa_ca.crt.erb)
  • config/prom_scraper_config.yml (from prom_scraper_config.yml.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.