I coded up running UAA locally awhile back and you might find something useful in my scripts, or consider using the scripts yourself https://github.com/starkandwayne/quick-uaa-local Nic

#uaa

And if you’re looking for some new video content on Quarks, we did a webinar recently which was recorded for your educational pleasure. https://www.cloudfoundry.org/event/webinar-eirini-quarks/ Nic

#cf

If anyone is looking for a small example of a BOSH release with a Helm chart for Quarks deployment and README docs, I’ve got an example at: * https://github.com/cloudfoundry-community/redis-boshreleas

#cf

This is fabulous seeing some cf-on-k8s native functionality. Nic

Before I learned that UAA wars went to Maven, I created a CI pipeline to create the .war files and store on github release. If it’s useful to you, they are at https://github.com/starkandwayne/uaa-war-

#uaa

Well done to all the teams involved! For anyone at SpringOne, a demo of SCF/cf-operator will appear in Matthias and my talk tomorrow at 10:30 in 18AB “Platforms Demystified” Nic

Someone else may have a more comprehensive answer, but I’ve seen the CVEs announced on the #security channel on CF slack. Nic

All hail the glorious unstoppable rise of Shannon! Or “+1” - that might be the modern equivalent. Or :thumbsup: Nic

Thanks Sree for leading the enormously important UAA project for so many years! Nic

Thanks Evan and your team over the years!

Hurray for the Unconference! Nic

For running a UAA as a CF app, try https://github.com/starkandwayne/quick-uaa-deployment-cf which generates a working uaa.yml for you; and does many other tricks. Nic

I’ve used —no-start to create an new app so I can bind services, then push to start. Is there a different way to do this without —no-start (and before you’ve started creating an optional manifest) Nic

Thanks Marco

Try adding this encryption: section https://github.com/starkandwayne/quick-uaa-deployment-cf/blob/master/src/uaa.yml#L8

#cf

To confirm: no better/nicer UX implementation will be provided to developers than for them to author bespoke service brokers to inject secrets into credhub and have client apps have to parse them out

Will we be making credhub indirectly available to developers so they can populate secret variables for use with their manifest? Currently if a developer wants secrets passed they need to store them lo

Yes that sounds right - or if you’re deploying in CI then your CI pipeline would create the vars.yml file for each diff target/stage. Nic

Thanks for putting the time into another unconference. I'm working on a book about the UAA; hopefully its done by the conf. Since the UAA is delightfully invisible to most people, I'd love to do 5-10

Frédéric, when will Xenial stemcells move from X to X.Y version numbering with less regular updates of the major version X? This will help compiled releases to not have to update as often. Nic