cloud_controller.yml

---
local_route: 127.0.0.1
external_port: 8181
tls_port: 8182
pid_filename: /tmp/cloud_controller.pid
stacks_file: config/stacks.yml

readiness_port:
  cloud_controller_worker: -1
  clock: -1
  deployment_updater: -1

external_protocol: http
external_domain: api2.vcap.me
temporary_disable_deployments: true
temporary_use_logcache: false
deployment_updater:
  update_frequency_in_seconds: 30
  lock_key: 'cf-deployment-updater'
  lock_owner: 'cf_deployment_updater.bosh-vm-id'
internal_service_hostname: api.internal.cf

system_domain_organization: the-system_domain-org-name
system_domain: vcap.me
app_domains:
  - customer-app-domain1.com
  - name: customer-app-domain2.com
system_hostnames:
  - api
  - uaa
  - login
  - doppler
  - loggregator

jobs:
  global:
    timeout_in_seconds: 14400

app_usage_events:
  cutoff_age_in_days: 31

service_usage_events:
  cutoff_age_in_days: 31

audit_events:
  cutoff_age_in_days: 31

failed_jobs:
  cutoff_age_in_days: 31

completed_tasks:
  cutoff_age_in_days: 31

default_app_memory: 1024 #mb
default_app_disk_in_mb: 1024
maximum_app_disk_in_mb: 2048
max_retained_deployments_per_app: 100
max_retained_builds_per_app: 100
max_retained_revisions_per_app: 100

broker_client_default_async_poll_interval_seconds: 60
broker_client_max_async_poll_duration_minutes: 10080

shared_isolation_segment_name: 'shared'

info:
  name: "vcap"
  build: "2222"
  version: 2
  support_address: "http://support.cloudfoundry.com"
  description: "Cloud Foundry sponsored by Pivotal"
  app_ssh_endpoint: "ssh.system.domain.example.com:2222"
  app_ssh_host_key_fingerprint: "47:0d:d1:c8:c3:3d:0a:36:d1:49:2f:f2:90:27:31:d0"
  app_ssh_oauth_client: "ssh-proxy"
  min_cli_version: "6.22.0"
  min_recommended_cli_version: "latest"
  custom: {"arbitrary": "stuff"}

instance_file_descriptor_limit: 16384
login:
  url: 'login-url.example.com'
  enabled: true

nginx:
  use_nginx: false
  instance_socket: "/var/vcap/sys/run/cloud_controller_ng/cloud_controller.sock"

logging:
  file: /tmp/cloud_controller.log
  level: debug2
  syslog: vcap.example
  anonymize_ips: false
  format:
    timestamp: 'rfc3339'

telemetry_log_path: spec/artifacts/cloud_controller_telemetry.log

loggregator:
  router: "127.0.0.1:3456"
  internal_url: 'http://loggregator-trafficcontroller.service.cf.internal:8081'

logcache:
  host: 'http://doppler.service.cf.internal'
  port: 8080

logcache_tls:
  key_file: 'spec/fixtures/certs/log_cache.key'
  cert_file: 'spec/fixtures/certs/log_cache.crt'
  ca_file: 'spec/fixtures/certs/log_cache_ca.crt'
  subject_name: 'log_cache'

doppler:
  url: 'wss://doppler.example.com:443'

log_cache:
  url: 'https://log-cache.example.com'

log_stream:
  url: 'https://log-stream.example.com'

uaa:
  url: "http://localhost:8080/uaa"
  internal_url: "http://localhost:6789"
  resource_id: "cloud_controller"
  symmetric_secret: "tokensecret"
  ca_file: "spec/fixtures/certs/uaa_ca.crt"
  client_timeout: 60

routing_api:
  url: "http://localhost:3000"
  routing_client_name: 'routing-client'
  routing_client_secret: 'routing-secret'

route_services_enabled: true
volume_services_enabled: true
disable_private_domain_cross_space_context_path_route_sharing: false

internal_api:
  auth_user: internal_user
  auth_password: internal_password

# App staging parameters
staging:
  # Max duration for staging process
  timeout_in_seconds: 120 # secs
  minimum_staging_memory_mb: 1024
  minimum_staging_disk_mb: 4096
  auth:
    user: zxsfhgjg
    password: ZNVfdase9

quota_definitions:
  default:
    memory_limit: 10240
    total_services: 100
    non_basic_services_allowed: true
    total_routes: 1000

default_quota_definition: default

resource_pool:
  maximum_size: 42
  minimum_size: 1
  resource_directory_key: "spec-cc-resources"
  fog_connection:
    blobstore_timeout: 5
    provider: "Local"
  fog_aws_storage_options: {}

packages:
  app_package_directory_key: "cc-packages"
  max_package_size: 42
  max_valid_packages_stored: 42
  fog_connection:
    blobstore_timeout: 5
    provider: "Local"
  fog_aws_storage_options: {}

droplets:
  droplet_directory_key: cc-droplets
  max_staged_droplets_stored: 42
  fog_connection:
    blobstore_timeout: 5
    provider: "Local"
  fog_aws_storage_options: {}

buildpacks:
  buildpack_directory_key: cc-buildpacks
  fog_connection:
    blobstore_timeout: 5
    provider: "Local"
  fog_aws_storage_options: {}

registry_buddy:
  host: "127.0.0.1"
  port: 8080

db_encryption_key: "asdfasdfasdf"
database_encryption:
  keys: {"encryption_key_0":"asdfasdfasdf"}
  current_key_label: "encryption_key_0"
  pbkdf2_hmac_iterations: 2048

default_health_check_timeout: 60
maximum_health_check_timeout: 180

disable_custom_buildpacks: false
copilot:
  enabled: false
broker_client_timeout_seconds: 60

uaa_client_name: 'cc-service-dashboards'
uaa_client_secret: 'some-sekret'
uaa_client_scope: openid,cloud_controller_service_permissions.read

cloud_controller_username_lookup_client_name: 'username_lookup_client_name'
cloud_controller_username_lookup_client_secret: 'username_lookup_secret'

cc_service_key_client_name: 'cc_service_key_client'
cc_service_key_client_secret: 'cc-service-key-client-super-s3cre7'

allow_app_ssh_access: true
default_app_ssh_access: true


renderer:
  max_results_per_page: 100
  default_results_per_page: 50
  max_inline_relations_depth: 3

install_buildpacks:
  - name: java_buildpack
    package: buildpack_java
  - name: ruby_buildpack
    package: buildpack_ruby
  - name: node_buildpack
    package: buildpack_node

security_group_definitions:
- name: dummy1
  rules: []
- name: dummy2
  rules: []

default_staging_security_groups:
- dummy3
default_running_security_groups:
- dummy4

allowed_cors_domains:
- http://*.appspot.com
- http://*.inblue.net
- http://talkoncorners.com
- http://borrowedheaven.org

rate_limiter:
  enabled: false
  general_limit: 2000
  unauthenticated_limit: 100
  reset_interval_in_minutes: 60

diego:
  file_server_url: http://file-server.service.cf.internal:8080
  cc_uploader_url: https://cc-uploader.service.cf.internal:9091
  use_privileged_containers_for_running: false
  use_privileged_containers_for_staging: false
  enable_declarative_asset_downloads: false
  lifecycle_bundles:
    "buildpack/cflinuxfs3": "buildpack_app_lifecycle/buildpack_app_lifecycle.tgz"
    "buildpack/windows2012R2": "windows_app_lifecycle/windows_app_lifecycle.tgz"
    "buildpack/windows": "buildpack_app_lifecycle/buildpack_app_lifecycle.tgz"
    "docker": "docker_app_lifecycle/docker_app_lifecycle.tgz"
  droplet_destinations:
    "cflinuxfs3": "/home/vcap"
    "windows": "/Users/vcap"
    "windows2012R2": "/"
  insecure_docker_registry_list: []
  docker_staging_stack: 'cflinuxfs3'
  bbs:
    url: https://bbs.service.cf.internal:8889
    key_file: /var/vcap/jobs/cloud_controller_ng/config/certs/bbs_client.key
    cert_file: /var/vcap/jobs/cloud_controller_ng/config/certs/bbs_client.crt
    ca_file: /var/vcap/jobs/cloud_controller_ng/config/certs/bbs_ca.crt
    connect_timeout: 10
    send_timeout: 10
    receive_timeout: 10
  pid_limit: 2048

opi:
  enabled: false
  cc_uploader_url: "http://cc-uploader.service.cf.internal:9091"
  experimental_enable_crds: false
  url: http://opi.service.cf.internal
  opi_staging: false

#kubernetes:
#  host_url: https://main.default.svc.cluster-domain.example
#  service_account:
#    token_file: "spec/fixtures/service_accounts/k8s.token"
#  ca_file: "spec/fixtures/certs/kubernetes_ca.crt"
#  workloads_namespace: 'cf-workloads'
#  kpack:
#    builder_namespace: 'cf-workloads-staging'
#    registry_service_account_name: 'fake-registry-service-account'
#    registry_tag_base: 'gcr.io/fake-image-repository'

directories:
  tmpdir: /tmp
  diagnostics: /tmp

stacks_file: config/stacks.yml
newrelic_enabled: false

max_annotations_per_resource: 200
max_labels_per_resource: 50
max_migration_duration_in_minutes: 45
db:
  log_level: 'debug'
  ssl_verify_hostname: false
  max_connections: 42
  pool_timeout: 60
  log_db_queries: true
  read_timeout: 3600
  connection_validation_timeout: 3600

staging:
  minimum_staging_file_descriptor_limit: 4200

index: 0
name: api

request_timeout_in_seconds: 600
skip_cert_verify: true
app_bits_upload_grace_period_in_seconds: 500
security_event_logging:
  enabled: false
  file: /tmp/cef.log

staging:
  timeout_in_seconds: 42
  expiration_in_secons: 42
  minimum_staging_memory_mb: 42
  minimum_staging_disk_mb: 42
  minimum_staging_file_descriptor_limit: 42
  auth:
    user: 'bob'
    password: 'laura'

bits_service:
  enabled: false

statsd_host: "127.0.0.1"
statsd_port: 8125

perform_blob_cleanup: false

diego_sync:
  frequency_in_seconds: 30
pending_droplets:
  frequency_in_seconds: 300
  expiration_in_seconds: 42

pending_builds:
  expiration_in_seconds: 42
  frequency_in_seconds: 300

perm:
  enabled: false
  hostname: perm.service.cf.internal
  port: 6283
  ca_cert_path: "spec/fixtures/certs/perm_ca.crt"
  timeout_in_milliseconds: 100

credhub_api:
  internal_url: https://credhub.capi.internal:8844
  external_url: https://credhub.capi.external:8844
  ca_cert_path: "spec/fixtures/certs/credhub_ca.crt"

credential_references:
  interpolate_service_bindings: true

copilot:
  enabled: false
  host: copilot.service.cf.internal
  port: 9080
  client_ca_file: 'spec/fixtures/certs/copilot_ca.crt'
  client_key_file: 'spec/fixtures/certs/copilot.key'
  client_chain_file: 'spec/fixtures/certs/copilot.crt'
  sync_frequency_in_seconds: 30

internal_route_vip_range: '127.128.0.0/9'

locket:
  host: 'locket.service.cf.internal'
  port: 8891
  ca_file: 'spec/fixtures/certs/bbs_ca.crt'
  cert_file: 'spec/fixtures/certs/bbs_client.crt'
  key_file: 'spec/fixtures/certs/bbs_client.key'

threadpool_size: 20

default_app_lifecycle: buildpack
custom_metric_tag_prefix_list: ["metric.tag.cloudfoundry.org"]