<commit_before># add cf-networking release
- type: replace
  path: /releases/-
  value:
    name: cf-networking
    sha1: 8b6b564e7c4642da074f65bb28180b4e13601cc1
    url: https://bosh.io/d/github.com/cloudfoundry-incubator/cf-networking-release?v=0.24.0
    version: 0.24.0

# add network policy db to mysql
- type: replace
  path: /instance_groups/name=mysql/jobs/name=mysql/properties/cf_mysql/mysql/seeded_databases/-
  value:
    name: network_policy
    username: network_policy
    password: "((<PASSWORD>))"

# add users and client scopes
- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/scim/users/name=admin/groups/-
  value: network.admin

- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/cf/scope?
  value: network.admin,network.write,cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write,doppler.firehose,uaa.user,routing.router_groups.read,routing.router_groups.write

- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/network-policy?
  value:
    authorities: uaa.resource,cloud_controller.admin_read_only
    authorized-grant-types: client_credentials,refresh_token
    secret: "((uaa_clients_network_policy_secret))"

- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/datadog-firehose-nozzle?
  value:
    access-token-validity: 1209600
    authorized-grant-types: authorization_code,client_credentials,refresh_token
    override: true
    secret: "((uaa_clients_datadog_firehose_nozzle_secret))"
    scope: openid,oauth.approvals,doppler.firehose
    authorities: oauth.login,doppler.firehose

# point garden to external networker
- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=garden/properties/garden/network_plugin?
  value: /var/vcap/packages/runc-cni/bin/garden-external-networker

- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=garden/properties/garden/network_plugin_extra_args?/-
  value: --configFile=/var/vcap/jobs/garden-cni/config/adapter.json

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: garden-cni
    release: cf-networking

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: cni-flannel
    release: cf-networking
    properties:
      cf_networking:
        plugin:
          etcd_endpoints:
            - cf-etcd.service.cf.internal
          etcd_client_cert: "((etcd_client.certificate))"
          etcd_client_key: "((etcd_client.private_key))"
          etcd_ca_cert: "((etcd_client.ca))"

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: netmon
    release: cf-networking

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: vxlan-policy-agent
    release: cf-networking
    properties:
      cf_networking:
        vxlan_policy_agent:
          ca_cert: "((network_policy_client.ca))"
          client_cert: "((network_policy_client.certificate))"
          client_key: "((network_policy_client.private_key))"

# policy server vm
- type: replace
  path: /instance_groups/-
  value:
    name: policy-server
    azs:
    - z1
    - z2
    instances: 2
    vm_type: t2.small
    stemcell: default
    networks:
    - name: default
    jobs:
    - name: policy-server
      release: cf-networking
      properties:
        cf_networking:
          policy_server:
            uaa_client_secret: "((uaa_clients_network_policy_secret))"
            uaa_ca: "((uaa_ssl.ca))"
            ca_cert: "((network_policy_server.ca))"
            server_cert: "((network_policy_server.certificate))"
            server_key: "((network_policy_server.private_key))"
            database:
              type: mysql
              username: network_policy
              password: "((<PASSWORD>))"
              host: sql-db.service.cf.internal
              port: 3306
              name: network_policy
    - name: route_registrar
      release: routing
      properties:
        route_registrar:
          routes:
          - name: policy-server
            port: 4002
            registration_interval: 20s
            uris:
            - "api.((system_domain))/networking"
    - name: consul_agent
      release: consul
      consumes:
        consul: {from: consul_server}
      properties:
        consul:
          agent:
            services:
              policy-server:
                name: policy-server
    - name: metron_agent
      release: loggregator<commit_msg>[#145595355] Specify consul links in cf-networking ops file<commit_after># add cf-networking release
- type: replace
  path: /releases/-
  value:
    name: cf-networking
    sha1: 8b6b564e7c4642da074f65bb28180b4e13601cc1
    url: https://bosh.io/d/github.com/cloudfoundry-incubator/cf-networking-release?v=0.24.0
    version: 0.24.0

# add network policy db to mysql
- type: replace
  path: /instance_groups/name=mysql/jobs/name=mysql/properties/cf_mysql/mysql/seeded_databases/-
  value:
    name: network_policy
    username: network_policy
    password: "((cf_<PASSWORD>))"

# add users and client scopes
- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/scim/users/name=admin/groups/-
  value: network.admin

- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/cf/scope?
  value: network.admin,network.write,cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write,doppler.firehose,uaa.user,routing.router_groups.read,routing.router_groups.write

- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/network-policy?
  value:
    authorities: uaa.resource,cloud_controller.admin_read_only
    authorized-grant-types: client_credentials,refresh_token
    secret: "((uaa_clients_network_policy_secret))"

- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/datadog-firehose-nozzle?
  value:
    access-token-validity: 1209600
    authorized-grant-types: authorization_code,client_credentials,refresh_token
    override: true
    secret: "((uaa_clients_datadog_firehose_nozzle_secret))"
    scope: openid,oauth.approvals,doppler.firehose
    authorities: oauth.login,doppler.firehose

# point garden to external networker
- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=garden/properties/garden/network_plugin?
  value: /var/vcap/packages/runc-cni/bin/garden-external-networker

- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=garden/properties/garden/network_plugin_extra_args?/-
  value: --configFile=/var/vcap/jobs/garden-cni/config/adapter.json

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: garden-cni
    release: cf-networking

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: cni-flannel
    release: cf-networking
    properties:
      cf_networking:
        plugin:
          etcd_endpoints:
            - cf-etcd.service.cf.internal
          etcd_client_cert: "((etcd_client.certificate))"
          etcd_client_key: "((etcd_client.private_key))"
          etcd_ca_cert: "((etcd_client.ca))"

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: netmon
    release: cf-networking

- type: replace
  path: /instance_groups/name=diego-cell/jobs/-
  value:
    name: vxlan-policy-agent
    release: cf-networking
    properties:
      cf_networking:
        vxlan_policy_agent:
          ca_cert: "((network_policy_client.ca))"
          client_cert: "((network_policy_client.certificate))"
          client_key: "((network_policy_client.private_key))"

# policy server vm
- type: replace
  path: /instance_groups/-
  value:
    name: policy-server
    azs:
    - z1
    - z2
    instances: 2
    vm_type: t2.small
    stemcell: default
    networks:
    - name: default
    jobs:
    - name: policy-server
      release: cf-networking
      properties:
        cf_networking:
          policy_server:
            uaa_client_secret: "((uaa_clients_network_policy_secret))"
            uaa_ca: "((uaa_ssl.ca))"
            ca_cert: "((network_policy_server.ca))"
            server_cert: "((network_policy_server.certificate))"
            server_key: "((network_policy_server.private_key))"
            database:
              type: mysql
              username: network_policy
              password: "((<PASSWORD>))"
              host: sql-db.service.cf.internal
              port: 3306
              name: network_policy
    - name: route_registrar
      release: routing
      properties:
        route_registrar:
          routes:
          - name: policy-server
            port: 4002
            registration_interval: 20s
            uris:
            - "api.((system_domain))/networking"
    - name: consul_agent
      release: consul
      consumes:
        consul: nil
        consul_client: {from: consul_client_link}
        consul_common: {from: consul_common_link}
        consul_server: nil
      properties:
        consul:
          agent:
            services:
              policy-server:
                name: policy-server
    - name: metron_agent
      release: loggregator
{'fraction_non_alphanumeric': 0.10829394069617533, 'fraction_numerical': 0.013214439192092824, 'mean_word_length': 2.865863787375415, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 7, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5554438', 'n_tokens_mistral': 3217, 'n_tokens_neox': 3090, 'n_words': 491}