The enable-service-access flag in cf-mgmt removes service access when set to true in Concourse for VMware Tanzu

Products

• Concourse for VMware Tanzu

Issue/Introduction

cf-mgmt has a flag labeled enable-service-access. When set to true, the module checks the service settings for all orgs and spaces and then removes any that are not explicitly defined in the Concourse pipeline. This flag should be set to false if you want to preserve service access that has been set up manually through the cf CLI.

When you run a concourse pipeline, you may notice that services which were formerly available in all orgs are no longer available or are only available in the system org.

cf-mgmt is enabled in this pipeline and the enable-service-access flag in cf-mgmt.yml is set to true.

Environment

Product Version: 3.8

Resolution

The enable-service-access flag has a misleading name. Its actual effect is to enable the management of service access through concourse pipelines.

To resolve this issue, set enable-service-access to false. That will stop cf-mgmt from removing access.

Now you can use the cf service-access command to restore what you want. Once restored, use the export-config command to reverse engineer the configuration. The output will show you how to set this up in each org configuration. This is how you can use this feature.

Alternatively, you can simply keep enable-service-access set to false.