bosh-cloudfoundry 0.7.0.alpha.4 → 0.7.0.alpha.5

data/bosh_release/releases/index.yml

@@ -264,3 +264,5 @@ builds:
     version: 131
   !binary "MmE3NmRhOTZkZDJkOWFkZTgxMjhlZjZkYzc3YjFmYWVmZWYzMjhkOQ==":
     version: 132
+  !binary "ZjgyYTRlMmUzMGU2MTViMTI4NWU0ZDliZjI5NWEzN2E3Y2Q5YjljYg==":
+    version: 133

data/lib/bosh/cloudfoundry.rb

@@ -1,5 +1,8 @@
 module Bosh; module Cloudfoundry; end; end
 
+require "cli/core_ext"
+require "cli/validation"
+
 require "bosh/cloudfoundry/release_version"
 require "bosh/cloudfoundry/release_version_cpi"
 require "bosh/cloudfoundry/release_version_cpi_size"

data/lib/bosh/cloudfoundry/release_version.rb

@@ -28,7 +28,7 @@ module Bosh::Cloudfoundry
       available_version, *versions = available_versions
       while versions && versions.size > 0
         version, *versions = versions
-        if version < version_number
+        if version <= version_number
           available_version = version
         else
           return available_version

data/spec/assets/v132/aws/medium.yml

@@ -235,7 +235,7 @@ properties:
     external_host: ccng
     srv_api_uri: http://api.mycloud.com
     cc_partition: default
-    db_encryption_key: "b963127302433579"
+    db_encryption_key: qwertyasdfgh
     bootstrap_admin_email: admin@mycloud.com
     bulk_api_password: qwertyasdfgh
     uaa_resource_id: cloud_controller

data/spec/assets/v133/aws/large.yml

@@ -0,0 +1,393 @@
+---
+name: demo
+director_uuid: UUID
+
+releases:
+ - name: cf-release
+   version: 133
+
+networks:
+- name: floating
+  type: vip
+  cloud_properties: {}
+- name: default
+  type: dynamic
+  cloud_properties:
+    security_groups:
+    - cf
+
+compilation:
+  workers: 6
+  network: default
+  reuse_compilation_vms: true
+  cloud_properties:
+    instance_type: m1.medium
+
+update:
+  canaries: 1
+  canary_watch_time: 30000-600000
+  update_watch_time: 30000-600000
+  max_in_flight: 4
+  max_errors: 1
+
+resource_pools:
+  - name: small
+    network: default
+    size: 9
+    stemcell:
+      name: bosh-stemcell
+      version: latest
+    cloud_properties:
+      instance_type: m1.small
+
+  - name: large
+    network: default
+    size: 1
+    stemcell:
+      name: bosh-stemcell
+      version: latest
+    cloud_properties:
+      instance_type: m1.large
+
+jobs:
+  - name: syslog_aggregator
+    release: cf-release
+    template: 
+      - syslog_aggregator
+    instances: 1
+    resource_pool: small
+    persistent_disk: 65536
+    networks:
+      - name: default
+        default: [dns, gateway]
+      
+  - name: postgres
+    release: cf-release
+    template: 
+      - postgres
+    instances: 1
+    resource_pool: small
+    persistent_disk: 65536
+    networks:
+      - name: default
+        default: [dns, gateway]
+    properties:
+      db: databases
+
+  - name: nfs_server
+    release: cf-release
+    template:
+      - debian_nfs_server
+    instances: 1
+    resource_pool: small
+    persistent_disk: 65536
+    networks:
+      - name: default
+        default: [dns, gateway]            
+
+  - name: nats
+    release: cf-release
+    template: 
+      - nats
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]            
+            
+  - name: uaa
+    release: cf-release
+    template: 
+      - uaa
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]           
+
+  - name: login
+    release: cf-release
+    template: 
+      - login
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]
+
+  - name: cloud_controller
+    release: cf-release
+    template: 
+      - cloud_controller_ng
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]
+    properties:
+      ccdb: ccdb
+
+  - name: router
+    release: cf-release
+    template: 
+      - gorouter
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]
+      - name: floating
+        static_ips:
+        - 1.2.3.4
+
+  - name: health_manager
+    release: cf-release
+    template: 
+      - health_manager_next
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]
+       
+  - name: dea
+    release: cf-release
+    template: dea_next
+    instances: 1
+    resource_pool: large
+    networks:
+      - name: default
+        default: [dns, gateway]            
+
+properties:
+  cf:
+    name: demo
+    dns: mycloud.com
+    ip_addresses: ["1.2.3.4"]
+    deployment_size: medium
+    security_group: cf
+    persistent_disk: 4096
+    common_password: qwertyasdfgh
+
+  domain: mycloud.com
+  system_domain: mycloud.com
+  system_domain_organization: mycloud.com
+  app_domains:
+    - mycloud.com
+
+  networks:
+    apps: default
+    management: default
+
+  nats:
+    address: 0.nats.default.demo.microbosh
+    port: 4222
+    user: nats
+    password: qwertyasdfgh
+    authorization_timeout: 5
+
+  router:
+    port: 8081
+    status:
+      port: 8080
+      user: gorouter
+      password: qwertyasdfgh
+
+  dea: &dea
+    max_memory: 4096
+    memory_mb: 4096
+    memory_overcommit_factor: 4
+    disk_mb: 16384
+    disk_overcommit_factor: 4
+
+  dea_next: *dea
+
+  service_lifecycle:
+    serialization_data_server:
+    - 169.254.1.1 
+
+  syslog_aggregator:
+    address: 0.syslog-aggregator.default.demo.microbosh
+    port: 54321
+
+  serialization_data_server:
+    port: 8080
+    logging_level: debug
+    upload_token: qwertyasdfgh
+    upload_timeout: 10
+
+  nfs_server:
+    address: 0.nfs-server.default.demo.microbosh
+    # network: "*.demo.microbosh"
+    # idmapd_domain: mycloud.com
+
+  debian_nfs_server:
+    no_root_squash: true
+
+  databases: &databases
+    db_scheme: postgres
+    address: 0.postgres.default.demo.microbosh
+    port: 5524
+    roles:
+      - tag: admin
+        name: ccadmin
+        password: qwertyasdfgh
+      - tag: admin
+        name: uaaadmin
+        password: qwertyasdfgh
+    databases:
+      - tag: cc
+        name: ccdb
+        citext: true
+      - tag: uaa
+        name: uaadb
+        citext: true
+
+  ccdb: &ccdb
+    db_scheme: postgres
+    address: 0.postgres.default.demo.microbosh
+    port: 5524
+    roles:
+      - tag: admin
+        name: ccadmin
+        password: qwertyasdfgh
+    databases:
+      - tag: cc
+        name: ccdb
+        citext: true
+
+  ccdb_ng: *ccdb
+
+  uaadb: 
+    db_scheme: postgresql
+    address: 0.postgres.default.demo.microbosh
+    port: 5524
+    roles:
+      - tag: admin
+        name: uaaadmin
+        password: qwertyasdfgh
+    databases:
+      - tag: uaa
+        name: uaadb
+        citext: true
+
+  cc_api_version: v2
+
+  cc: &cc
+    logging_level: debug
+    external_host: ccng
+    srv_api_uri: http://api.mycloud.com
+    cc_partition: default
+    db_encryption_key: qwertyasdfgh
+    bootstrap_admin_email: admin@mycloud.com
+    bulk_api_password: qwertyasdfgh
+    uaa_resource_id: cloud_controller
+    staging_upload_user: uploaduser
+    staging_upload_password: qwertyasdfgh
+    resource_pool:
+      resource_directory_key: cc-resources
+      # Local provider when using NFS
+      fog_connection:
+        provider: Local
+        local_root: /var/vcap/shared
+    packages:
+      app_package_directory_key: cc-packages
+    droplets:
+      droplet_directory_key: cc-droplets
+
+  ccng: *cc
+
+  login:
+    protocol: http
+    links:
+      home: http://console.mycloud.com
+      passwd: http://console.mycloud.com/password_resets/new
+      signup: http://console.mycloud.com/register
+
+  uaa:
+    url: http://uaa.mycloud.com
+    spring_profiles: postgresql
+    no_ssl: true
+    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
+    resource_id: account_manager
+    jwt:
+      signing_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1
+        JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6
+        0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB
+        AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA
+        Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0
+        KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J
+        duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE
+        xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8
+        +5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek
+        lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h
+        jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh
+        HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+
+        4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=
+        -----END RSA PRIVATE KEY-----
+      verification_key: |
+        -----BEGIN PUBLIC KEY-----
+        MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
+        KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
+        qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
+        spULZVNRxq7veq/fzwIDAQAB
+        -----END PUBLIC KEY-----
+    cc:
+      client_secret: qwertyasdfgh
+    admin:
+      client_secret: qwertyasdfgh
+    batch:
+      username: batchuser
+      password: qwertyasdfgh
+    client:
+      autoapprove:
+        - cf
+        - my
+        - micro
+        - support-signon
+        - login
+    clients:
+      login:
+        override: true
+        scope: openid
+        authorities: oauth.login
+        secret: qwertyasdfgh
+        authorized-grant-types: authorization_code,client_credentials,refresh_token
+        redirect-uri: http://login.mycloud.com
+      support-services:
+        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
+        secret: qwertyasdfgh
+        authorized-grant-types: authorization_code,client_credentials
+        redirect-uri: http://support-signon.mycloud.com
+        authorities: portal.users.read
+        access-token-validity: 1209600
+        refresh-token-validity: 1209600
+      oauth2service:
+        secret: qwertyasdfgh
+        scope: openid,cloud_controller.read,cloud_controller.write
+        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
+        authorized-grant-types: client_credentials,implicit
+        redirect-uri: http://rewritten-later.cloudfoundry.com/whatever
+        override: true
+        autoapprove: true
+      cf:
+        override: true
+        authorized-grant-types: password,implicit,refresh_token
+        authorities: uaa.none
+        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
+        access-token-validity: 7200
+        refresh-token-validity: 1209600
+      servicesmgmt:
+        override: true
+        secret: qwertyasdfgh
+        scope: openid,cloud_controller.read,cloud_controller.write
+        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
+        authorized-grant-types: authorization_code,client_credentials,password,implicit
+        redirect-uri: http://servicesmgmt.mycloud.com/auth/cloudfoundry/callback
+        autoapprove: true
+    scim:
+      users:
+      - admin|qwertyasdfgh|scim.write,scim.read,openid,cloud_controller.admin
+      - services|qwertyasdfgh|scim.write,scim.read,openid,cloud_controller.admin

data/spec/assets/v133/aws/medium.yml

@@ -0,0 +1,361 @@
+---
+name: demo
+director_uuid: UUID
+
+releases:
+ - name: cf-release
+   version: 133
+
+networks:
+- name: floating
+  type: vip
+  cloud_properties: {}
+- name: default
+  type: dynamic
+  cloud_properties:
+    security_groups:
+    - default
+
+update:
+  canaries: 1
+  canary_watch_time: 30000-600000
+  update_watch_time: 30000-600000
+  max_in_flight: 4
+  max_errors: 1
+
+compilation:
+  workers: 6
+  network: default
+  reuse_compilation_vms: true
+  cloud_properties:
+    instance_type: m1.medium
+
+resource_pools:
+  - name: small
+    network: default
+    size: 3
+    stemcell:
+      name: bosh-stemcell
+      version: latest
+    cloud_properties:
+      instance_type: m1.small
+
+  - name: medium
+    network: default
+    size: 2
+    stemcell:
+      name: bosh-stemcell
+      version: latest
+    cloud_properties:
+      instance_type: m1.medium
+
+jobs:
+  - name: data
+    release: cf-release
+    template:
+      - postgres
+      - debian_nfs_server
+    instances: 1
+    resource_pool: small
+    persistent_disk: 4096
+    networks:
+    - name: default
+      default:
+      - dns
+      - gateway
+    properties:
+      db: databases
+
+  - name: core
+    release: cf-release
+    template:
+      - syslog_aggregator
+      - nats
+      - health_manager_next
+      - collector
+      - login
+    instances: 1
+    resource_pool: medium
+    networks:
+    - name: default
+      default:
+      - dns
+      - gateway
+
+  # need a separate job for uaa due to https://github.com/cloudfoundry/cf-release/issues/104
+  - name: uaa
+    release: cf-release
+    template:
+      - uaa
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]
+
+  - name: api
+    release: cf-release
+    template:
+      - cloud_controller_ng
+      - gorouter
+    instances: 1
+    resource_pool: medium
+    networks:
+    - name: default
+      default:
+      - dns
+      - gateway
+    - name: floating
+      static_ips:
+      - 1.2.3.4
+    properties:
+      db: databases
+
+  - name: dea
+    release: cf-release
+    template:
+      - dea_next
+    instances: 1
+    resource_pool: small
+    networks:
+      - name: default
+        default: [dns, gateway]
+
+properties:
+  cf:
+    name: demo
+    dns: mycloud.com
+    ip_addresses: ["1.2.3.4"]
+    deployment_size: medium
+    security_group: default
+    persistent_disk: 4096
+    common_password: qwertyasdfgh
+
+  domain: mycloud.com
+  system_domain: mycloud.com.com
+  system_domain_organization: system_domain
+  app_domains:
+    - mycloud.com
+
+  networks:
+    apps: default
+    management: default
+
+  nats:
+    address: 0.core.default.demo.microbosh
+    port: 4222
+    user: nats
+    password: qwertyasdfgh
+    authorization_timeout: 5
+
+  router:
+    port: 8081
+    status:
+      port: 8080
+      user: gorouter
+      password: qwertyasdfgh
+
+  dea: &dea
+    max_memory: 4096
+    memory_mb: 4084
+    memory_overcommit_factor: 4
+    disk_mb: 4096
+    disk_overcommit_factor: 4
+
+  dea_next: *dea
+
+  service_lifecycle:
+    serialization_data_server:
+    - 0.core.default.demo.microbosh
+
+  syslog_aggregator:
+    address: 0.core.default.demo.microbosh
+    port: 54321
+
+  serialization_data_server:
+    port: 8080
+    logging_level: debug
+    upload_token: qwertyasdfgh
+    upload_timeout: 10
+
+  collector:
+    deployment_name: cf
+    use_tsdb: false
+    use_aws_cloudwatch: false
+    use_datadog: false
+
+  nfs_server:
+    address: 0.data.default.demo.microbosh
+    #network: "*.demo.microbosh"
+    #idmapd_domain: mycloud.com
+
+  debian_nfs_server:
+    no_root_squash: true
+
+  databases: &databases
+    db_scheme: postgres
+    address: 0.data.default.demo.microbosh
+    port: 5524
+    roles:
+      - tag: admin
+        name: ccadmin
+        password: qwertyasdfgh
+      - tag: admin
+        name: uaaadmin
+        password: qwertyasdfgh
+    databases:
+      - tag: cc
+        name: ccdb
+        citext: true
+      - tag: uaa
+        name: uaadb
+        citext: true
+
+  ccdb: &ccdb
+    db_scheme: postgres
+    address: 0.data.default.demo.microbosh
+    port: 5524
+    roles:
+      - tag: admin
+        name: ccadmin
+        password: qwertyasdfgh
+    databases:
+      - tag: cc
+        name: ccdb
+        citext: true
+
+  ccdb_ng: *ccdb
+
+  uaadb: 
+    db_scheme: postgresql
+    address: 0.data.default.demo.microbosh
+    port: 5524
+    roles:
+      - tag: admin
+        name: uaaadmin
+        password: qwertyasdfgh
+    databases:
+      - tag: uaa
+        name: uaadb
+        citext: true
+
+  cc_api_version: v2
+
+  cc: &cc
+    logging_level: debug
+    external_host: ccng
+    srv_api_uri: http://api.mycloud.com
+    cc_partition: default
+    db_encryption_key: qwertyasdfgh
+    bootstrap_admin_email: admin@mycloud.com
+    bulk_api_password: qwertyasdfgh
+    uaa_resource_id: cloud_controller
+    staging_upload_user: uploaduser
+    staging_upload_password: qwertyasdfgh
+    resource_pool:
+      resource_directory_key: cc-resources
+      # Local provider when using NFS
+      fog_connection:
+        provider: Local
+        local_root: /var/vcap/shared
+    packages:
+      app_package_directory_key: cc-packages
+    droplets:
+      droplet_directory_key: cc-droplets
+
+  ccng: *cc
+
+  login:
+    protocol: http
+    links:
+      home: http://console.mycloud.com
+      passwd: http://console.mycloud.com/password_resets/new
+      signup: http://console.mycloud.com/register
+
+  uaa:
+    url: http://uaa.mycloud.com
+    spring_profiles: postgresql
+    no_ssl: true
+    catalina_opts: -Xmx768m -XX:MaxPermSize=256m
+    resource_id: account_manager
+    jwt:
+      signing_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1
+        JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6
+        0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB
+        AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA
+        Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0
+        KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J
+        duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE
+        xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8
+        +5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek
+        lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h
+        jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh
+        HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+
+        4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=
+        -----END RSA PRIVATE KEY-----
+      verification_key: |
+        -----BEGIN PUBLIC KEY-----
+        MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d
+        KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX
+        qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug
+        spULZVNRxq7veq/fzwIDAQAB
+        -----END PUBLIC KEY-----
+    cc:
+      client_secret: qwertyasdfgh
+    admin:
+      client_secret: qwertyasdfgh
+    batch:
+      username: batchuser
+      password: qwertyasdfgh
+    client:
+      autoapprove:
+        - cf
+        - my
+        - micro
+        - support-signon
+        - login
+    clients:
+      login:
+        override: true
+        scope: openid
+        authorities: oauth.login
+        secret: qwertyasdfgh
+        authorized-grant-types: authorization_code,client_credentials,refresh_token
+        redirect-uri: http://login.mycloud.com
+      support-services:
+        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write
+        secret: qwertyasdfgh
+        authorized-grant-types: authorization_code,client_credentials
+        redirect-uri: http://support-signon.mycloud.com
+        authorities: portal.users.read
+        access-token-validity: 1209600
+        refresh-token-validity: 1209600
+      oauth2service:
+        secret: qwertyasdfgh
+        scope: openid,cloud_controller.read,cloud_controller.write
+        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
+        authorized-grant-types: client_credentials,implicit
+        redirect-uri: http://rewritten-later.cloudfoundry.com/whatever
+        override: true
+        autoapprove: true
+      cf:
+        override: true
+        authorized-grant-types: password,implicit,refresh_token
+        authorities: uaa.none
+        scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write
+        access-token-validity: 7200
+        refresh-token-validity: 1209600
+      servicesmgmt:
+        override: true
+        secret: qwertyasdfgh
+        scope: openid,cloud_controller.read,cloud_controller.write
+        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret
+        authorized-grant-types: authorization_code,client_credentials,password,implicit
+        redirect-uri: http://servicesmgmt.mycloud.com/auth/cloudfoundry/callback
+        autoapprove: true
+    scim:
+      users:
+      - admin|qwertyasdfgh|scim.write,scim.read,openid,cloud_controller.admin
+      - services|qwertyasdfgh|scim.write,scim.read,openid,cloud_controller.admin