README.md

cloud-foundry-scripts

Scripts to assist with the configuration and operation of Cloud Foundry.

Managing cloud.gov team

Creating Concourse "navigator" team members

1. uaac target <OPS_UAA_FQDN>

2. uaac token client get admin -s <OPS_UAA_ADMINCLIENT_PASSPHRASE>

3. Run

   ./make-concourse-navigator.sh <EMAIL_ADDRESS>

Removing Concourse "navigator" team members

1. uaac target <OPS_UAA_FQDN>

2. uaac token client get admin -s <OPS_UAA_ADMINCLIENT_PASSPHRASE>

3. Run

   ./make-concourse-navigator.sh -r <EMAIL_ADDRESS>

Creating platform admins

These steps correspond to the steps for creating admins.

1. Have the user log in to CF first.

2. uaac target <CF_UAA_FQDN>

3. uaac token client get admin -s <CF_UAA_ADMINCLIENT_PASSPHRASE>

4. Run

   ./make-cf-admin.sh <EMAIL_ADDRESS>

5. uaac target <OPS_UAA_FQDN>

6. uaac token client get admin -s <OPS_UAA_ADMINCLIENT_PASSPHRASE>

7. Run

   ./make-ops-admin.sh <EMAIL_ADDRESS>

Removing platform admins

1. uaac target <CF_UAA_FQDN>

2. uaac token client get admin -s <CF_UAA_ADMINCLIENT_PASSPHRASE>

3. Run

   ./make-cf-admin.sh -r <EMAIL_ADDRESS>

4. uaac target <OPS_UAA_FQDN>

5. uaac token client get admin -s <OPS_UAA_ADMINCLIENT_PASSPHRASE>

6. Run

   ./make-ops-admin.sh -r <EMAIL_ADDRESS>

Creating deployer users

1. Ensure the user running this is a CF admin (see Creating admins)

2. Run

   ./cf-create-deployer-user.sh <ORG>

Creating CSV for recent users since a given date

1. pip install pyyaml
2. gem install cf-uaac
3. uaac target uaa.fr.cloud.gov
4. uaac token sso get cf -s '' --scope scim.read

• Once you log in with UAA, make sure you navigate to https://login.fr.cloud.gov/passcode to get your one-time passcode.

1. python cf-get-recent-users.py YYYY-MM-DD

Creating CSV for counting sandboxes logs over the last three months

1. apt update
2. apt install python3
3. pip install -U requests
4. pip install -U dateutil
5. export ES_HOST="${IP_ADDRESS_LOGSEARCH_MASTER_NODE}"
6. python3 count-sandbox-logs.py
7. ls -l summary.csv