enable-routing-integrity.yml

---
- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=rep/properties/containers?/proxy/enabled
  value: true

- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=rep/properties/containers?/proxy/require_and_verify_client_certificates
  value: true

- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=rep/properties/containers?/proxy/trusted_ca_certificates
  value:
  - ((service_cf_internal_ca.certificate))

- type: replace
  path: /instance_groups/name=diego-cell/jobs/name=rep/properties/containers?/proxy/verify_subject_alt_name
  value:
  - gorouter.service.cf.internal
  - ssh-proxy.service.cf.internal