enable-nfs-test-ldapserver.yml

- type: replace
  path: /instance_groups/name=nfstestserver/jobs/-
  value:
    name: nfstestldapserver
    release: nfs-volume
    properties:
      ldap:
        ssl:
          active: true
          ca_cert: ((ldap_test_server_ssl.ca))
          server_cert: ((ldap_test_server_ssl.certificate))
          server_key: ((ldap_test_server_ssl.private_key))

- type: replace
  path: /addons/name=bosh-dns-aliases/jobs/name=bosh-dns-aliases/properties/aliases/domain=nfstestldapserver.service.cf.internal?
  value:
    domain: nfstestldapserver.service.cf.internal
    targets:
    - query: '*'
      instance_group: nfstestserver
      deployment: cf
      network: default
      domain: bosh

- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=nfsv3driver/properties/nfsv3driver/ldap_ca_cert?
  value: ((ldap_test_server_ssl.ca))

- type: replace
  path: /variables/-
  value:
    name: ldap_test_server_ca
    type: certificate
    options:
      common_name: ldap_test_server_ca
      is_ca: true

- type: replace
  path: /variables/-
  value:
    name: ldap_test_server_ssl
    type: certificate
    update_mode: converge
    options:
      ca: ldap_test_server_ca
      common_name: nfstestldapserver.service.cf.internal
      alternative_names:
      - nfstestldapserver.service.cf.internal