cloudfoundry-community/cf-plugin-deploy

Deploy All The (Cloud Foundry) Things!

What is cf-plugin-deploy?

cf-plugin-deploy allows you to specify initial users and their credentials, their role/space associations, as well as limiting what brokers are accessible from which spaces at the time of the CF deployment.

How to install

Clone the repo, build the binary, and install the plugin:

git clone https://github.com/cloudfoundry-community/cf-plugin-deploy
cd cf-plugin-deploy
make 
make cf

How to use

Please see the manifests in examples for available syntax. Once you have built the manifest, deploy the changes to your Cloud Foundry with cf deploy.

cf-plugin-deploy's Issues

No Godeps?

Cannot build binary due to missing dependencies ;)

Support user provided services

We should support defining/updating user provided services via cf-plugin-deploy.

Possible config format (underneath the spaces section):

organizations:
  my-org:
    spaces:
      my-space:
        user-provided-services:
        - name: my-user-provided-service
           credentials:
             key: value
             other: value
        - name: my-user-provided-route-service
           route_service_url: https://example.com
        - name: my-user-provided-syslog-drain
           syslog_drain_url: syslog://example.com

These services should also be treated like regular services in cf-deploy so that they can be bound to applications when they're pushed via cf-deploy.

Support managing security groups

Allow cf-plugin-deploy to create security/update groups in CF, and assign them to global defaults for staging/running apps, or to individual orgs/spaces

security_groups:
- name: org-sg
   rules:
   - destination: 10.0.0.1
      protocol: all
- name: space-sg
   rules:
   - destination: 10.0.0.2
      protocol: all
- name: global-sg
   rules:
   - destination: 10.0.0.3
     protocol: all
global_security_groups:
  staging:
  - global-sg
  running:
  - global-sg
organizations:
  my-org:
     security-groups:
     - org-sg
     spaces:
     - space-sg

Rules contents should just be jsonified, not necessarily inspected for anything, and pushed as SG contents.

Feature Request: Support space scoped security group sets in the upcoming cf-cli release

The CF documentation talked about space scoped staging and running security groups but it only supported the running security group through the cf CLI. It looks like a future of cf will correct this oversight.

The YAML file will be updated to support this future change. It will be setup like the platform wide security-group-sets

organization
ABC:
security_group_sets:
running:
- sg1
staging:
-sg2
spaces:
spaceman:
security_group_set:
running:
- sg3
staging
- sg4