cf-secrets-example.external.yml

# External secrets that are not easily rotated

properties:
  cc:
    newrelic:
      license_key: NEWRELIC_LICENSE_KEY
    # README: https://github.com/cloudfoundry/cloud_controller_ng/issues/465
    # Cannot be rotated once set.
    db_encryption_key:
  ccdb:
    db_scheme: postgres
    roles:
    - tag:
      name: CCDB_DB_USER
      password: CCDB_DB_PASSWORD
    databases:
    - tag:
      name: CCDB_DB_NAME
    address: CCDB_DB_HOST
    port:
  collector:
    newrelic_insights:
      api_key:
      app_id:
    newrelic_plugin:
      license_key: new_relic_license_key
  collectd:
    riemann_server: RIEMANN_SERVER_IP
  uaadb:
    db_scheme: postgresql
    roles:
    - tag:
      name:
      password:
    databases:
    - tag:
      name
    address:
    port:
  login:
    smtp:
      host:
      password:
      from_address:
      port:
      user:
    saml:
      signatureAlgorithm: SHA256
      serviceProviderKey: |+
        -----BEGIN RSA PRIVATE KEY-----
        -----END RSA PRIVATE KEY-----
      serviceProviderKeyPassword:
      serviceProviderCertificate: |+
        -----BEGIN CERTIFICATE-----
        -----END CERTIFICATE-----
      providers:

  uaa:
    clients:
      kibana_oauth2_client:
        secret:
      influxdb-firehose-nozzle:
        secret:
      sandbox-bot:
        secret:
      uaa-token-audit:
        secret:
      uaa_extras_app:
        secret:
      logsearch_firehose_ingestor:
        secret:
      dashboard:
        secret:
      buildpack-notifier:
        secret:
      kubernetes-client:
        secret:
      cloud-gov-community:
        secret:
      concourse-broker:
        secret:
      uaaproxy:
        secret:
      firehose_exporter:
        secret:
    newrelic:
      production:
        app_name:
        error_collector:
          ignore_errors: akka.actor.ActorKilledException
        license_key: new_relic_license_key
    scim:
      users:
      - name: logsearch-firehose-ingestor
        password:
        groups:
        - cloud_controller.admin
        - doppler.firehose
  nessus-agent:
    this-has-moved: to-runtime-config
    but-the-manifest: wants-something-to-merge