Add the Contrast service broker tile for VMware Tanzu

Download the Contrast service broker tile by going to the Broadcom support portal and searching for Contrast Security Service Broker for VMware Tanzu v2.3.8.

Store the file locally and navigate to your Pivotal Ops Manager instance.

Select Import a Product and then, select the contrast-security-service-broker-#.#.#.pivotal tile that you downloaded.

If the file you downloaded has a ZIP extension, rename it to contrast-security-service-broker-#.#.#.pivotal.

Assign AZs and networks:

1. Log in to the Tanzu Ops Manager.

   Logging in to Tanzu Ops Manager provides instructions.

2. Get the domain details by selecting Small Footprint VMware Tanzu Application Service > Settings > Domain.

3. Get CF login credentials by selecting the Credentials tab and searching for UAA

4. Get Admin credentials: Select Admin Credentials and copy the details

5. Log in using this CF-CLI command:

   # cf login --skip-ssl-validation -a api.<domain_name> -u <username> -p <password>
   cf login --skip-ssl-validation -a api.sys.jive-3929901.zf68081f7.shepherd.lease -u admin -p YVFN7dr-0xMXLD7wThp5yifz9Xo0SjU6

6. Deploy the .pivotal file that you downloaded from the Broadcom Support portal or received from your software distributor by selecting Import a Product and uploading the .pivotal file.

7. Select the Plus icon () to include the product.

8. In Small Footprint VMware Tanzu Application Service, select the Settings tab and select Assign AZs and Networks.

9. Select the AZs and network. Then, select Save.

The tile requires some configuration before you can deploy it. The service broker does not include service plans by default. Add at least one plan before you deploy the Contrast service broker tile.

1. To add a service plan, select Service Plans in the Contrast service broker tile and select Add.

2. Set these configuration parameters in the service plan:

   • TeamServer:  The URL for your Contrast application instance

   • TeamServer Service Key:Organization service key

   • TeamServer API Key:Organization API key

   • Organization UUID: Organization ID to which the application will belong

   • Username: Your Contrast username

   • Plan Name: Name of the plan as it will appear in Apps Manager

   • Proxy Host: The hostname of a proxy for the service broker to communicate with Contrast

   • Proxy Port: The proxy port

   • Proxy Username: The proxy username, if it requires authentication

   • Proxy Password: The proxy password, if it required authentication

   Note

   In addition to the proxy settings for the tile, you also need to set up the agent communication with the proxy.

3. Select Save.

   If you want some applications to belong to different organizations, define the other plans you will need.

4. In the dashboard, select Apply Changes .

   This process can take some time to finish.

After you successfully deploy the service broker, you can bind the credentials to an application. Go to the Marketplace to find the Contrast service broker option.

In the Pivotal Ops Manager, select the Contrast service broker option to see the available plans that you created .

To choose the plan you want to bind to an application, use Select this Plan.

Specify an instance name for the plan.

This selection doesn't affect the service broker. You can use any name you want for the instance.

In the Bind to App drop-down, select the application to bind to this service. Then, restage the application.

This action retrieves the latest agent from Contrast to instrument your application.

Optional: If you want to override agent properties, such as the application name, set environment variables in PCF using a command similar to the following example:

cf set-env APP-NAME JAVA_OPTS " -Dcontrast.agent.java.standalone_app_name=PivotalSpringApp"