DEFAULT

alt_names

scopable True
required False
default None
scope order specific > generic
convert list

Certificate Signing Request Alternative Domain Names.

bits

scopable True
required False
default 4096
scope order specific > generic
convert size

Certificate Private Key Length.

c

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request Country.

ca

scopable True
required False
default None
scope order specific > generic

The name of secret containing a certificate to use as a Certificate Authority. This secret must be in the same namespace.

cn

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request Common Name.

comment

scopable False
required False
default  
scope order specific > generic

Helps users understand the role of the service and resources, which is nice to on-call support people having to operate on a service they are not usually responsible for.

disable

scopable True
required False
default False
scope order specific > generic
candidates True | False
convert boolean

A disabled resource will be ignored on service startup and shutdown. Its status is always reported n/a.

Set in DEFAULT, the whole service is disabled. A disabled service does not honor start and stop actions. These actions immediately return success.

sudo svcmgr -s <path> disable only sets DEFAULT.disable. As resources disabled state is not changed, sudo svcmgr -s <path> enable does not enable disabled resources.

drpnodes

scopable True
required False
default  
scope order specific > generic
convert list_lower

Alternate backup nodes, where the service could be activated in a DRP situation if the 'drpnode' is not available. These nodes are also data synchronization targets for 'sync' resources.

email

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request Email.

env

scopable False
required False
default <same as node env>
scope order specific > generic
candidates DEV | DRP | FOR | INT | PRA | PRD | PRJ | PPRD | REC | STG | TMP | TST | UAT

A non-PRD service can not be brought up on a PRD node, but a PRD service can be startup on a non-PRD node (in a DRP situation). The default value is the node env.

id

scopable False
required False
default <random uuid>
scope order specific > generic

A RFC 4122 random uuid generated by the agent. To use as reference in resources definitions instead of the service name, so the service can be renamed without affecting the resources.

l

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request Location.

lock_timeout

scopable False
required False
default 60
scope order specific > generic
convert duration

A duration expression, like '1m30s'. The maximum wait time for the action lock acquire. The svcmgr --waitlock option overrides this parameter.

nodes

scopable True
required False
default <hostname of the current node>
scope order specific > generic
convert nodes_selector

A node selector expression specifying the list of cluster nodes hosting service instances.

o

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request Organization.

ou

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request Organizational Unit.

st

scopable True
required False
default None
scope order specific > generic

Certificate Signing Request State.

validity

scopable True
required False
default 365d
scope order specific > generic
convert duration_to_day

Certificate Validity duration.