DEFAULT
*******

.. _secret.DEFAULT.alt_names:

:kw:`alt_names`
===============

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
**convert**       list
================= ================================================================

Certificate Signing Request Alternative Domain Names.

.. _secret.DEFAULT.bits:

:kw:`bits`
==========

================= ================================================================
**scopable**      True
**required**      False
**default**       4096
**scope order**   specific > generic
**convert**       size
================= ================================================================

Certificate Private Key Length.

.. _secret.DEFAULT.c:

:kw:`c`
=======

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request Country.

.. _secret.DEFAULT.ca:

:kw:`ca`
========

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

The name of secret containing a certificate to use as a Certificate Authority. This secret must be in the same namespace.

.. _secret.DEFAULT.cn:

:kw:`cn`
========

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request Common Name.

.. _secret.DEFAULT.comment:

:kw:`comment`
=============

================= ================================================================
**scopable**      False
**required**      False
**default**       
**scope order**   specific > generic
================= ================================================================

Helps users understand the role of the service and resources, which is nice to on-call support people having to operate on a service they are not usually responsible for.

.. _secret.DEFAULT.disable:

:kw:`disable`
=============

================= ================================================================
**scopable**      True
**required**      False
**default**       False
**scope order**   specific > generic
**candidates**    True | False
**convert**       boolean
================= ================================================================

A disabled resource will be ignored on service startup and shutdown. Its status is always reported ``n/a``.

Set in DEFAULT, the whole service is disabled. A disabled service does not honor start and stop actions. These actions immediately return success.

:cmd:`sudo svcmgr -s <path> disable` only sets :kw:`DEFAULT.disable`. As resources disabled state is not changed, :cmd:`sudo svcmgr -s <path> enable` does not enable disabled resources.

.. _secret.DEFAULT.drpnodes:

:kw:`drpnodes`
==============

================= ================================================================
**scopable**      True
**required**      False
**default**       
**scope order**   specific > generic
**convert**       list_lower
================= ================================================================

Alternate backup nodes, where the service could be activated in a DRP situation if the 'drpnode' is not available. These nodes are also data synchronization targets for :c-res:`sync` resources.

.. _secret.DEFAULT.email:

:kw:`email`
===========

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request Email.

.. _secret.DEFAULT.env:

:kw:`env`
=========

================= ================================================================
**scopable**      False
**required**      False
**default**       <same as node env>
**scope order**   specific > generic
**candidates**    DEV | DRP | FOR | INT | PRA | PRD | PRJ | PPRD | REC | STG | TMP | TST | UAT
================= ================================================================

A non-PRD service can not be brought up on a PRD node, but a PRD service can be startup on a non-PRD node (in a DRP situation). The default value is the node env.

.. _secret.DEFAULT.id:

:kw:`id`
========

================= ================================================================
**scopable**      False
**required**      False
**default**       <random uuid>
**scope order**   specific > generic
================= ================================================================

A RFC 4122 random uuid generated by the agent. To use as reference in resources definitions instead of the service name, so the service can be renamed without affecting the resources.

.. _secret.DEFAULT.l:

:kw:`l`
=======

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request Location.

.. _secret.DEFAULT.lock_timeout:

:kw:`lock_timeout`
==================

================= ================================================================
**scopable**      False
**required**      False
**default**       60
**scope order**   specific > generic
**convert**       duration
================= ================================================================

A duration expression, like ``1m30s``. The maximum wait time for the action lock acquire. The :cmd:`svcmgr --waitlock` option overrides this parameter.

.. _secret.DEFAULT.nodes:

:kw:`nodes`
===========

================= ================================================================
**scopable**      True
**required**      False
**default**       <hostname of the current node>
**scope order**   specific > generic
**convert**       nodes_selector
================= ================================================================

A node selector expression specifying the list of cluster nodes hosting service instances.

.. _secret.DEFAULT.o:

:kw:`o`
=======

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request Organization.

.. _secret.DEFAULT.ou:

:kw:`ou`
========

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request Organizational Unit.

.. _secret.DEFAULT.st:

:kw:`st`
========

================= ================================================================
**scopable**      True
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

Certificate Signing Request State.

.. _secret.DEFAULT.validity:

:kw:`validity`
==============

================= ================================================================
**scopable**      True
**required**      False
**default**       365d
**scope order**   specific > generic
**convert**       duration_to_day
================= ================================================================

Certificate Validity duration.