manifest.json

{
    "Packages": {
        "redis-package": {
            "Debug": true,
            "SignerID": "43361affedeb75affee9baec7e054a5e14883213e5a121b67d74a0e12e9d2b7a",
            "ProductID": 13,
            "SecurityVersion": 1
        }
    },
    "Marbles": {
        "redis-main": {
            "Package": "redis-package",
            "Parameters": {
                "Argv": [
                    "redis-server",
                    "/redis-data/redis.conf"
                ],
                "Files": {
                    "/dev/attestation/keys/redis-key": "{{ raw .Secrets.ProtectedFilesKey }}",
                    "/redis-data/redis.conf": "bind 0.0.0.0\nprotected-mode no\nport 0\ntls-port 6379\ntls-cert-file redis.crt\ntls-key-file redis.key\ntls-ca-cert-file ca.crt\ntls-auth-clients no\ntls-replication yes\ntls-cluster yes\nsave ''\ndir /redis-data/",
                    "/redis-data/redis.crt": "{{ pem .MarbleRun.MarbleCert.Cert }}",
                    "/redis-data/redis.key": "{{ pem .MarbleRun.MarbleCert.Private }}",
                    "/redis-data/ca.crt": "{{ pem .MarbleRun.RootCA.Cert }}"
                }
            }
        },
        "redis-replica": {
            "Package": "redis-package",
            "Parameters": {
                "Argv": [
                    "redis-server",
                    "/redis-data/redis.conf"
                ],
                "Files": {
                    "/dev/attestation/keys/redis-key": "{{ raw .Secrets.ProtectedFilesKey }}",
                    "/redis-data/redis.conf": "bind 0.0.0.0\nprotected-mode no\nport 0\ntls-port 6379\ntls-cert-file redis.crt\ntls-key-file redis.key\ntls-ca-cert-file ca.crt\ntls-auth-clients no\ntls-replication yes\ntls-cluster yes\nsave ''\ndir /redis-data/\nreplicaof redis-main.redis 6379",
                    "/redis-data/redis.crt": "{{ pem .MarbleRun.MarbleCert.Cert  }}",
                    "/redis-data/redis.key": "{{ pem .MarbleRun.MarbleCert.Private }}",
                    "/redis-data/ca.crt": "{{ pem .MarbleRun.RootCA.Cert }}"
                }
            }
        }
    },
    "Secrets": {
        "ProtectedFilesKey": {
            "Type": "symmetric-key",
            "Size": 128
        }
    }
}