---
- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/cf-custom?
  value:
    access-token-validity: 120
    authorities: uaa.none
    authorized-grant-types: password,refresh_token
    override: true
    refresh-token-validity: 2592000
    scope: network.admin,network.write,cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write,doppler.firehose,uaa.user,routing.router_groups.read,routing.router_groups.write,cloud_controller.admin_read_only,cloud_controller.global_auditor,perm.admin,clients.read
    secret: ((custom-client-secret))

---
- type: replace
  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/cf-custom?
  value:
    access-token-validity: 120
    authorities: uaa.none
    authorized-grant-types: password,refresh_token
    override: true
    refresh-token-validity: 2592000
    scope: network.admin,network.write,cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write,doppler.firehose,uaa.user,routing.router_groups.read,routing.router_groups.write,cloud_controller.admin_read_only,cloud_controller.global_auditor,perm.admin,clients.read
    secret: ((custom-client-secret))

- type: replace
  path: /variables?/-
  value:
    name: custom-client-secret
    type: password

Add custom client secret to bosh variables
Add custom client secret to bosh variables

We will need to be able to retrieve it from CredHub later, so we added
it to the variables section of the manifest so that bosh will store it
in CredHub.

[#165318179](https://www.pivotaltracker.com/story/show/165318179)

Co-authored-by: Will Murphy <a0e419adf8e2224ae039ba5f1877fb7f62d300e5@pivotal.io>
