uaa-service-broker-instructions.txt

uaac target --skip-ssl-validation https://uaa.dev.cfdev.sh
uaac token client get admin -s admin-client-secret

uaac client add uaa-credentials-broker \
    --name uaa-credentials-broker \
    --authorized_grant_types client_credentials \
    --authorities scim.write,uaa.admin,cloud_controller.admin \
    --scope uaa.none

git clone https://github.com/cloudfoundry-community/uaa-credentials-broker.git

# manifest anpassen
---
applications:
 - name: uaa-credentials-broker
   command: uaa-credentials-broker
   buildpacks:
   - https://github.com/cloudfoundry/go-buildpack#v1.8.40
   env:
     GOVERSION: go1.12
     UAA_ADDRESS: https://uaa.dev.cfdev.sh
     UAA_CLIENT_ID: uaa-credentials-broker
     UAA_CLIENT_SECRET: xxxxxx
     #UAA_ZONE: uaa
     CF_ADDRESS: https://api.dev.cfdev.sh
     BROKER_USERNAME: selber
     BROKER_PASSWORD: ausgedacht
     EMAIL_ADDRESS: info@example.local
#####


cf push
cf create-service-broker uaa.credentials selber ausgedacht https://uaa-credentials-broker.dev.cfdev.sh

cf enable-service-access cloud-gov-service-account

#cf enable-service-access cloud-gov-identity-provider

cf cs cloud-gov-service-account space-deployer service-account
cf create-service-key service-account access-key

cf service-key service-account access-key