tsb.yml

---
name: terraform-secure-backend

instance_groups:
  - name: terraform-secure-backend
    azs:
      - z1
    instances: 1
    vm_type: default
    stemcell: default
    networks:
      - name: default
    jobs:
      - name: bpm
        release: bpm
      - name: terraform-secure-backend
        release: terraform-secure-backend
        consumes:
          credhub:
            from: credhub
            deployment: ((cf_deployment_name))
        provides:
          terraform-secure-backend:
            as: terraform-secure-backend
            shared: true
        properties:
          tsb:
            base_path: /terraform-secure-backend/tfstate/terraform-secure
            tls: ((tsb_ssl))
            auth:
              username: ((tsb_user.username))
              password: ((tsb_user.password))
            credhub:
              client: credhub_tsb_client
              secret: ((/((director_name))/((cf_deployment_name))/credhub_tsb_client_secret))
              tls: ((/((director_name))/((cf_deployment_name))/credhub_tls))
            uaa:
              tls: ((/((director_name))/((cf_deployment_name))/uaa_ssl))


variables:
  - name: tsb_ssl
    type: certificate
    options:
      alternative_names:
        - tsb.service.cf.internal
      ca: /((director_name))/((cf_deployment_name))/service_cf_internal_ca
      common_name: tsb.service.cf.internal
  - name: tsb_user
    type: user

update:
  canaries: 1
  max_in_flight: 32
  canary_watch_time: 1000-100000
  update_watch_time: 1000-100000
  serial: false

stemcells:
  - alias: default
    os: ubuntu-xenial
    version: latest

manifest_version: v1.2.0

releases:
  - name: terraform-secure-backend
    version: "1.3.0"
    url: https://github.com/orange-cloudfoundry/terraform-secure-backend-release/releases/download/v1.3.0/terraform-secure-backend-1.3.0.tgz
    sha1: 9c786a23fe820be8efea4728ba18c7e7c00c75f4
  - name: bpm
    url: https://bosh.io/d/github.com/cloudfoundry-incubator/bpm-release?v=1.0.2
    version: 1.0.2
    sha1: 41cb53a672e59581577af5ed11abf04d61cf3887