a9s CF Service Guard Properties
This section describes the supported properties of the a9s CF Service Guard component.
Cloud Foundry Configuration
| Property | Default Value | Description |
|---|---|---|
cloud_foundry.api_endpoint | The Cloud Foundry API endpoint in which the a9s CF Service Guard should manage the ASGs. | |
cloud_foundry.authentication.username | The Cloud Foundry username that should be used by the a9s CF Service Guard. | |
cloud_foundry.authentication.password | The Cloud Foundry password that should be used by the a9s CF Service Guard. | |
cloud_foundry.skip_ssl_validation | false | Indicates if the SSL validation for the Cloud Foundry connection can be skipped, e.g. when self-signed certificates are used. |
cloud_foundry.asg_prefix | "a9s-asg" | The prefix for the Cloud Foundry ASGs created by the a9s CF Service Guard. |
cloud_foundry.asg_prefix]When the property cloud_foundry.asg_prefix is set to another value in the a9s CF Service Guard, the change must also
be reflected in the configuration of the smoke-test errand.
When the property cloud_foundry.asg_prefix is changed after the a9s CF Service Guard has already been deployed, only
ASGs for newly created Service Instances will use this new prefix. The names of existing ASGs are not changed!
Service Brokers Configuration
| Property | Description |
|---|---|
service_brokers | A list of a9s Service Brokers that should be asked for known service instances. |
The a9s CF Service Guard can only create ASGs in Cloud Foundry for service instances that are known by one of the configured a9s Service Brokers.
To enable the support for the corresponding a9s Data Services the following Ops files MUST be applied to the a9s CF Service Guard deployment manifest:
- a9s KeyValue:
cf-service-guard/ops/add-keyvalue.yml - a9s MariaDB:
cf-service-guard/ops/add-mariadb.yml - a9s Messaging:
cf-service-guard/ops/add-messaging.yml - a9s MongoDB:
cf-service-guard/ops/add-mongodb.yml - a9s MySQL:
cf-service-guard/ops/add-mysql.yml - a9s PostgreSQL:
cf-service-guard/ops/add-postgresql.yml - a9s Redis:
cf-service-guard/ops/add-redis.yml - a9s Search:
cf-service-guard/ops/add-search.yml
Allowed Consul Nodes Configuration
| Property | Description |
|---|---|
allowed_consul_nodes | An array of Consul node names or regular expressions, for matching Consul node names, to be processed by the a9s CF Service Guard. |
When using the a9s Data Service specific Ops files mentioned under Service Brokers Configuration, the corresponding regular expressions are also added to process the corresponding Consul nodes of the respective a9s Data Service.
Workers Configuration
| Property | Default Value | Description |
|---|---|---|
workers.consul_nodes_processor.execute_interval | 15 | Number of seconds between each execution of the job. |
workers.security_groups_synchronizer.execute_interval | 15 | Number of seconds between each execution of the job. |
workers.security_groups_synchronizer.count | 3 | Number of security_groups_synchronizer worker processes. |
workers.shared_spaces_updater.enabled | false | true to enable the shared_spaces_updater worker, false otherwise. |
workers.shared_spaces_updater.execute_interval | 300 | Number of seconds between each execution of the job. |
TLS Configuration
The a9s CF Service Guard comes with TLS (HTTPS) enabled for its API by default.
The a9s CF Service Guard is only configurable to listen to HTTPS and does not support HTTP anymore.
Protocols
For more details on this property, please refer to the a9s Framework TLS Configuration documentation.