Spring Cloud Services for Cloud Foundry 3.2

Configuring the Spring Cloud Services tile

Last Updated February 27, 2025

Here you will find information about Spring Cloud Services tile options, resource configuration, and lifecycle errands.

Tanzu Operations Manager administrators can use Role-Based Access Control (RBAC) to manage which operators can make deployment changes, view credentials, and manage user roles in Tanzu Operations Manager. Therefore, your role permissions might not allow you to perform every procedure in this operator guide. For more information about roles in Tanzu Operations Manager, see Understand Roles in Tanzu Operations Manager.

Service Broker settings

The Spring Cloud Services (SCS) tile includes a number of settings for the service broker. You can configure these settings by:

  1. Go to the Installation Dashboard of Tanzu Operations Manager.
  2. Click the Spring Cloud Services tile.
  3. Navigate to the SCS Service Broker pane.

Configure service access

By default, the Config Server and Service Registry services are made available globally (that is, to all orgs).

To configure service availability:

  1. Go to Config Server access.

    Configuring Service Access

  2. Select Global to make the service available to all orgs, or select None to make the service unavailable to all orgs.

  3. Repeat for Service Registry access.

Set buildpack for service instances

By default, the Spring Cloud Services service broker stages service instance backing apps using the buildpack chosen by the platform’s buildpack detection; normally, this will be the highest-priority Java buildpack.

To cause the broker to use a particular Java buildpack regardless of priority, you can set the name of the buildpack to use in the Spring Cloud Services tile settings, under Java Buildpack.

Enter the name of the desired Java buildpack. The broker will use the selected buildpack to stage service instance backing apps.

Configuring Buildpack

Select Stack for backing applications

By default, the Spring Cloud Services service broker will stages service instance backing apps using the cflinuxfs4 stack.

To cause the broker to use a particular stack, you can set the name of the stack to use in the Spring Cloud Services tile settings, under Stack.

Enter the name of the desired stack. The broker will use the selected stack to stage service instance backing apps.

Configuring Service Stack

Set service instance timeout

By default, the Spring Cloud Services service broker will wait 30 minutes before considering a service instance operation to have failed.

You can specify a different timeout interval in the Spring Cloud Services tile settings, under Status change timeout.

Enter the desired number of minutes. The broker will allow the specified number of minutes for service instance operations to complete.

Configuring Service Instance Timeout

Set concurrent service instance upgrade

When running upgrade-all-instances errand, by default, the Spring Cloud Services service broker upgrades five service instances concurrently.

You can specify a different number of concurrent instances in the Spring Cloud Services tile settings, under Concurrent Service Instance Upgrade.

Enter the desired number. The broker will use the specified number to upgrade service instances, concurrently, during upgrade-all-instances errand.

Configuring Concurrent Service Instance Upgrade

Set custom domain for service instances

By default, the Spring Cloud Services service broker assigns routes to service instances using the Tanzu Platform for Cloud Foundry application domain.

You can specify a custom domain for service instance routes in the Spring Cloud Services tile settings, under Service instances domain.

Your custom domain must be available to the p-spring-cloud-services org. If you are installing Spring Cloud Services, you must manually create this org before configuring the custom domain in the Spring Cloud Services tile settings.

Enter the desired domain. The broker will use this domain to create routes for service instances.

Configuring Custom Domain

Activate service keys

By default, the use of service keys is deactivated for service instances.

To allow the use of service keys on service instances, select Enable off platform service key access.

Activating Service Keys

Configure CredHub as a backend for config server

By default, CredHub can be used as a backend for Config Server.

To prevent the use of CredHub as a backend for Config Server, unselect Enable CredHub as a backend for config server.

Activating Service Keys

Lifecycle errand configuration

The Spring Cloud Services tile includes two co-located lifecycle errands. You can view these in Tanzu Operations Manager by visiting the Installation Dashboard, clicking the Spring Cloud Services tile, and then navigating to the Errands pane.

Spring Cloud Services includes two post-deploy errands and one pre-delete errand. These errands can be individually set to always run (On) or to never run (Off).

Errands

To ensure that your Tanzu Platform for CF foundation receives important updates to the tile, VMware recommends that all Spring Cloud Services lifecycle errands be set to On.

register-brokers errand

The register-brokers errand registers the Spring Cloud Services service broker, and the broker for the Config Server’s mirror service, with the Cloud Controller, and makes all Spring Cloud Services service plans available to all orgs.

destroy brokers errand

The destroy-brokers errand deletes all orgs and spaces specific to Spring Cloud Services and deregisters the Spring Cloud Services broker and mirror service broker from the Cloud Controller.

upgrade-all-instances errand

The upgrade-all-instances errand attempts to update all SCS service instances to the latest version.

  • Status Change Timeout: A service instance upgrade will be considered failed if service instance does not start successfully after a time configured by Status Change Timeout, which defaults to 30 minutes.
  • Concurrent Service Instance Upgrade: Depending on available resources the maximum number of concurrent upgrades can be configured by the Concurrent Service Instance Upgrade option, which defaults to 5.

If a service instance upgrade fails, the errand continues to upgrade the remaining service instances. The errand execution will be considered successful if all services are upgraded successfully. If one or more service instances fail to upgrade, the errand execution will be considered failed. After the errand completes, any service instance that failed to upgrade can be upgraded using the cf CLI:

$ cf update-service <SERVICE INSTANCE NAME> -c '{"upgrade": true}'

System logging configuration

To configure system logging for Spring Cloud Services, visit the Installation Dashboard, click the Spring Cloud Services tile, and then navigate to the Syslog pane.

For information about system logging in Tanzu Platform for CF (formerly TAS for VMs), see Configuring Logging in Tanzu Platform for Cloud Foundry.

Configuring System Logging

Mirror service resource configuration

The Spring Cloud Services Config Server relies on a “mirror service” to make mirrors of Git repositories used by Config Server service instances. You can configure the size of the persistent disk used to store these Git mirrors.

In the Spring Cloud Services tile settings, navigate to the Resource Config pane.

For the spring-cloud-services job, select the desired disk size value from the drop-down menu under Persistent Disk Type. The default value is 10 GB. Consider setting a size equal to the disk space required to mirror all Git repositories potentially used by Config Server service instances, with some additional disk space.

Mirror Service Resource Configuration