# credhub-broker-example

**Repository Path**: mirrors_vmware-archive/credhub-broker-example

## Basic Information

- **Project Name**: credhub-broker-example
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-03-25
- **Last Updated**: 2026-04-19

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# credhub-broker-example

## Dev

Copy `local_dev.sh.template` to `local_dev.sh` and customize to your environment, then run via

```bash
local_dev.sh
```

* `./consumer` is an app meant to be bound to the service broker, that will display environment variables
* `./proxy` is an app that exposes `credhub.service.cf.internal:8844` outside, to test API calls more easily.
    - Do not leave proxy deployed; it's only meant for local testing

## Creating a UAA Client

To create a UAA user that can read and write to CredHub, use
the [UAA CLI](https://docs.cloudfoundry.org/uaa/uaa-user-management.html).

Create the client:

```bash
uaac target https://uaa.sys.<pcf system domain>
uaac token client get admin -s <admin client secret>
uaac client add my-broker \
  --name my-broker \
  --secret <my-broker client secret> \
  --authorized_grant_types client_credentials,refresh_token \
  --authorities oauth.login,credhub.read,credhub.write
```

To manually get a token:

```bash
uaac token client get my-broker -s <my-broker client secret>
uaac context
``` 

## References
* https://docs.pivotal.io/tiledev/ssi-creds-tiledev.html
* https://credhub-api.cfapps.io/
* https://docs.pivotal.io/tiledev/credhub.html