You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: credhub.html.md.erb
+7-6
Original file line number
Diff line number
Diff line change
@@ -16,9 +16,10 @@ See the [CredHub documentation](https://docs.cloudfoundry.org/credhub/index.html
16
16
17
17
Many <%= vars.platform_name %> components use credentials to authenticate connections, and <%= vars.platform_name %> installations often have hundreds of active credentials. Secure credential management is essential to prevent data and security breaches.
18
18
19
-
In <%= vars.platform_name %> v1.11.0 and later, CredHub runs on the BOSH VM, alongside the BOSH Director and UAA. Ops Manager v1.11 stores its credentials in CredHub,
20
-
and users can retrieve them using the CredHub API or the **Credentials** tab of the BOSH Director tile.
21
-
Tile developers can embed CredHub calls in [manifest snippets](#snippets) and <%= vars.app_runtime_abbr %> apps can retrieve credentials using the CredHub API.
19
+
In <%= vars.platform_name %> v1.11.0 and later, CredHub runs on the BOSH VM, alongside the
20
+
BOSH Director and UAA. Ops Manager v1.11 and later stores its credentials in CredHub,
21
+
and you can retrieve them using the CredHub API or the **Credentials** tab of the BOSH Director tile.
22
+
You can embed CredHub calls in [manifest snippets](#snippets) and <%= vars.app_runtime_abbr %> apps can retrieve credentials using the CredHub API.ile developers
22
23
23
24
For more information about variable names and values, see [Fetching variable names and values](./get-credhub-vars.html) for how to fetch variable names and values using the CredHub API.
24
25
@@ -52,7 +53,7 @@ use the JavaScript migration process. After a successful migration, Ops Manager
52
53
53
54
For more information about migrating Credhub credentials, see [Migrating existing credentials to CredHub](./migrating-credhub-credentials.html).
54
55
55
-
For more information about the Credhub API, see [CredHub API](https://credhub-api.cfapps.io), the [CredHub CLI GitHub repository](https://github.com/cloudfoundry-incubator/credhub-cli), and the [CredHub Release GitHub repository](https://github.com/pivotal-cf/credhub-release).
56
+
For more information about the Credhub API, see the [CredHub CLI GitHub repository](https://github.com/cloudfoundry-incubator/credhub-cli), and the [CredHub Release GitHub repository](https://github.com/pivotal-cf/credhub-release).
56
57
57
58
## <aid="api-variables"></a>Fetching variable names and values
58
59
@@ -62,7 +63,7 @@ For more information about variable names and values, see <a href="./get-credhub
62
63
63
64
## <aid="snippets"></a> CredHub in manifest snippets
64
65
65
-
Tile developers can embed CredHub in product template and job template manifest snippets using
66
+
You can embed CredHub in product template and job template manifest snippets using
Copy file name to clipboardexpand all lines: ssi-creds-tiledev.html.md.erb
+12-11
Original file line number
Diff line number
Diff line change
@@ -196,7 +196,8 @@ do the following:
196
196
197
197
1. In your service broker code, locate where your broker handles binding requests from the CC.
198
198
199
-
1. Add code that authenticates your service broker to CredHub using OAuth2 tokens from UAA. Each call to the CredHub API must include an authorization header. For more information about CredHub authentication, see the [CredHub API documentation](https://docs.cloudfoundry.org/api/credhub/version/2.9/).
199
+
1. Add code that authenticates your service broker to CredHub using OAuth2 tokens from UAA. Each call to the CredHub API must include an authorization header. For more information about
200
+
CredHub authentication, see the [Authentication](https://docs.cloudfoundry.org/api/credhub/version/2.9/#_authentication) section of the CredHub API documentation.
200
201
201
202
<pclass="note">
202
203
<spanclass="note__title">Note</span>
@@ -226,17 +227,17 @@ See the following example for how to format your API call:
226
227
-H 'Content-type: application/json'
227
228
```
228
229
229
-
Where:
230
+
Where:
231
+
* `CREDHUB.INTERNAL_URL` and `CREDHUB.PORT` are the address and port of CredHub.
230
232
231
-
* `CREDHUB.INTERNAL_URL` and `CREDHUB.PORT` are the address and port of CredHub.
232
-
* `CLIENT-IDENTIFIER` is a value provided by the service broker to uniquely identify the broker.
233
-
* `SERVICE-IDENTIFIER` is the name of the service offering as shown in the services catalog.
234
-
* `BINDING-GUID` is the GUID created by the CC and passed to the service broker in the service binding request.
235
-
* `CREDENTIAL-NAME` is a value provided by the service broker to name the credential.
236
-
* `SERVICE-URL` is the URL of your service.
237
-
* `USERNAME` and `PASSWORD` are your binding credentials.
233
+
* `CLIENT-IDENTIFIER` is a value provided by the service broker to uniquely identify the broker.
234
+
* `SERVICE-IDENTIFIER` is the name of the service offering as shown in the services catalog.
235
+
* `BINDING-GUID` is the GUID created by the CC and passed to the service broker in the service binding request.
236
+
* `CREDENTIAL-NAME` is a value provided by the service broker to name the credential.
237
+
* `SERVICE-URL` is the URL of your service.
238
+
* `USERNAME` and `PASSWORD` are your binding credentials.
238
239
239
-
For further reference, see the [Set Credentials](https://docs.vmware.com/en/VMware-Tanzu-Application-Service/<%=vars.current_major_version%>/tas-for-vms/secure-si-creds.html) section of the CredHub API documentation.
240
+
For further reference, see the [Set Credentials](https://docs.vmware.com/en/VMware-Tanzu-Application-Service/4.0/tas-for-vms/secure-si-creds.html) section of the CredHub API documentation.
240
241
241
242
1. Grant your application permission to read the credential from CredHub:
242
243
@@ -255,7 +256,7 @@ See the following example for how to format your API call:
255
256
256
257
Where `APP-GUID` is the GUID of the Cloud Foundry application being used
257
258
258
-
1. Edit your service broker so that it returns a reference to the stored credentials in response to the
259
+
2. Edit your service broker so that it returns a reference to the stored credentials in response to the
259
260
binding request from the CC. Return the credentials as a single key `credhub-ref` with thee value formatted
260
261
as `/c/CLIENT-IDENTIFIER/SERVICE-IDENTIFIER/BINDING-GUID/CREDENTIAL-NAME`.
0 commit comments