Skip to content

Commit 65e6ea7

Browse files
mrvanesmrvanes
committed
Fix SRAM devconf config
1 parent 53497e1 commit 65e6ea7

File tree

7 files changed

+197
-32
lines changed

7 files changed

+197
-32
lines changed

‎core/docker-compose.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -116,7 +116,7 @@ services:
116116
hostname: mujina.docker
117117

118118
managegui:
119-
image: ghcr.io/openconext/openconext-manage/manage-gui:7.4.9
119+
image: ghcr.io/openconext/openconext-manage/manage-gui:latest
120120
environment:
121121
HTTPD_CSP: ""
122122
HTTPD_SERVERNAME: "manage.dev.openconext.local"
@@ -138,7 +138,7 @@ services:
138138
condition: service_healthy
139139

140140
manageserver:
141-
image: ghcr.io/openconext/openconext-manage/manage-server:7.4.9
141+
image: ghcr.io/openconext/openconext-manage/manage-server:latest
142142
environment:
143143
USE_SYSTEM_CA_CERTS: true
144144
volumes:

‎core/engine/docker-compose.override.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,18 @@
11
---
2+
# This configuration uses a sub-mount for ./engine/parameters.yml
3+
# Make sure to NEVER write to parameters.yml in ${ENGINE_CODE_PATH} after starting
4+
# the container. It will destroy the sub-mount!!
25
services:
36
engine:
47
image: ghcr.io/openconext/openconext-basecontainers/${ENGINE_PHP_IMAGE:-php72-apache2-node14-composer2:latest}
58
volumes:
69
- ${ENGINE_CODE_PATH}:/var/www/html
10+
- ./engine/parameters.yml:/var/www/html/app/config/parameters.yml
711
- ./engine/appconf.conf:/etc/apache2/sites-enabled/appconf.conf
812
environment:
913
- APP_ENV=${APP_ENV:-dev}
10-
# - SYMFONY_ENV=${APP_ENV:-dev}
14+
- SYMFONY_ENV=${APP_ENV:-dev}
1115
- APP_DEBUG=1
16+
healthcheck:
17+
test: ["CMD", "true"]
18+
interval: 10s

‎core/engine/parameters.yml‎

Lines changed: 151 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,151 @@
1+
# This file is auto-generated during the composer install
2+
parameters:
3+
secret: secret
4+
domain: dev.openconext.local
5+
hostname: engine.dev.openconext.local
6+
trusted_proxies:
7+
- 192.168.1.1
8+
- 10.0.0.1
9+
enabled_languages:
10+
- nl
11+
- en
12+
attribute_definition_file_path: '%kernel.project_dir%/application/configs/attributes.json'
13+
encryption_keys:
14+
default:
15+
publicFile: /config/engine/engineblock.crt
16+
privateFile: /config/engine/engineblock.pem
17+
forbidden_signature_methods: { }
18+
allowed_acs_location_schemes:
19+
- http
20+
- https
21+
metadata_add_requested_attributes: all
22+
php_settings:
23+
memory_limit: 256M
24+
display_errors: '1'
25+
error_reporting: '6135'
26+
date.timezone: Europe/Amsterdam
27+
sendmail_from: 'OpenConext EngineBlock <openconext-engineblock@openconext.org>'
28+
http_client.timeout: 60
29+
api.users.metadataPush.username: manage
30+
api.users.metadataPush.password: secret
31+
api.users.profile.username: profile
32+
api.users.profile.password: secret
33+
api.users.deprovision.username: lifecycle
34+
api.users.deprovision.password: secret
35+
pdp.host: 'https://pdp.dev.openconext.local'
36+
pdp.username: pdp_admin
37+
pdp.password: secret
38+
pdp.client_id: EngineBlock
39+
pdp.policy_decision_point_path: /pdp/api/decide/policy
40+
attribute_aggregation.base_url: 'https://aa.dev.openconext.local/internal/attribute/aggregation'
41+
attribute_aggregation.username: eb
42+
attribute_aggregation.password: secret
43+
logger.channel: engineblock
44+
logger.fingers_crossed.passthru_level: NOTICE
45+
logger.fingers_crossed.action_level: ERROR
46+
logger.line_format: '[%%datetime%%] %%channel%%.%%level_name%%: %%message%% %%extra%% %%context%%'
47+
database.host: mariadb
48+
database.port: '3306'
49+
database.user: ebrw
50+
database.password: secret
51+
database.dbname: eb
52+
database.test.host: mariadb
53+
database.test.port: '3306'
54+
database.test.user: ebrw
55+
database.test.password: secret
56+
database.test.dbname: eb
57+
engineblock.metadata_push_memory_limit: 256M
58+
minimum_execution_time_on_invalid_received_response: 5000
59+
addgueststatus_guestqualifier: 'urn:collab:org:dev.openconext.local'
60+
cookie.path: /
61+
cookie.secure: true
62+
cookie.locale.domain: .dev.openconext.local
63+
cookie.locale.expiry: 5184000
64+
cookie.locale.http_only: false
65+
cookie.locale.secure: true
66+
view_default_title: OpenConext
67+
view_default_header: OpenConext
68+
view_default_logo: /images/logo.png
69+
view_default_logo_width: 96
70+
view_default_logo_height: 96
71+
env_name: ''
72+
env_ribbon_color: ''
73+
ui_return_to_sp_link: false
74+
email_request_access_address: help@example.org
75+
monitor_database_health_check_query: 'SELECT uuid FROM user LIMIT 1;'
76+
wayf.cutoff_point_for_showing_unfiltered_idps: 50
77+
wayf.remember_choice: false
78+
wayf.display_default_idp_banner_on_wayf: true
79+
wayf.default_idp_entity_id: 'https://default-idp.dev.openconext.local'
80+
global.site_notice.show: false
81+
global.site_notice.allowed.tags: '<a><u><i><br><wbr><strong><em><blink><marquee><p><ul><ol><dl><li><dd><dt><div><span><blockquote><hr><h2></h2><h3><h4><h5><h6>'
82+
time_frame_for_authentication_loop_in_seconds: 60
83+
maximum_authentication_procedures_allowed: 5
84+
maximum_authentications_per_session: 5
85+
consent_store_values: true
86+
email_idp_debugging:
87+
from:
88+
name: 'OpenConext EngineBlock'
89+
address: no-reply@example.org
90+
to:
91+
address: coin-logs-dev@list.surfnet.nl
92+
name: 'OpenConext Admin'
93+
subject: 'IdP debug info from %%1$s'
94+
mailer_transport: smtp
95+
mailer_host: localhost
96+
mailer_port: '25'
97+
mailer_user: ''
98+
mailer_password: ''
99+
feature_eb_encrypted_assertions: true
100+
feature_eb_encrypted_assertions_require_outer_signature: true
101+
feature_api_metadata_push: true
102+
feature_api_consent_listing: true
103+
feature_api_consent_remove: true
104+
feature_api_metadata_api: true
105+
feature_api_deprovision: true
106+
feature_run_all_manipulations_prior_to_consent: false
107+
feature_block_user_on_violation: false
108+
feature_enable_consent: true
109+
feature_stepup_sfo_override_engine_entityid: false
110+
feature_enable_idp_initiated_flow: true
111+
feature_enable_sram_interrupt: true
112+
profile_base_url: 'https://profile.dev.openconext.local'
113+
stepup.authn_context_class_ref_blacklist_regex: '/http:\/\/vm\.openconext\.org\/assurance\/loa[1-3]/'
114+
stepup.loa.mapping:
115+
10:
116+
engineblock: 'http://dev.openconext.local/assurance/loa1'
117+
gateway: 'http://dev.openconext.local/assurance/loa1'
118+
15:
119+
engineblock: 'http://dev.openconext.local/assurance/loa1_5'
120+
gateway: 'http://dev.openconext.local/assurance/loa1_5'
121+
20:
122+
engineblock: 'http://dev.openconext.local/assurance/loa2'
123+
gateway: 'http://dev.openconext.local/assurance/loa2'
124+
30:
125+
engineblock: 'http://dev.openconext.local/assurance/loa3'
126+
gateway: 'http://dev.openconext.local/assurance/loa3'
127+
stepup.loa.loa1: 'http://dev.openconext.local/assurance/loa1'
128+
stepup.gateway.sfo.entity_id: 'https://gateway.dev.openconext.local/second-factor-only/metadata'
129+
stepup.gateway.sfo.sso_location: 'https://gateway.dev.openconext.local/second-factor-only/single-sign-on'
130+
stepup.gateway.sfo.key_file: /config/engine/engineblock.crt
131+
stepup.sfo.override_engine_entityid: ''
132+
theme.name: skeune
133+
feature_enable_sso_notification: false
134+
sso_notification_encryption_algorithm: AES-256-CBC
135+
sso_notification_encryption_key: '<xxx>'
136+
sso_notification_encryption_key_salt: '<xxx>'
137+
feature_enable_sso_session_cookie: false
138+
sso_session_cookie_max_age: 0
139+
auth.log.attributes: { }
140+
141+
sram.api_token: secret
142+
sram.base_url: 'https://sbs.dev.openconext.local/api/users/'
143+
sram.authz_location: authz_eb
144+
sram.attributes_location: attributes_eb
145+
sram.interrupt_location: interrupt
146+
sram.verify_peer: false
147+
sram.allowed_attributes:
148+
- 'urn:mace:dir:attribute-def:eduPersonEntitlement'
149+
- 'urn:mace:dir:attribute-def:uid'
150+
- 'urn:mace:dir:attribute-def:eduPersonPrincipalName'
151+
- 'urn:oid:1.3.6.1.4.1.24552.500.1.1.1.13'

‎core/manage/manage-api-users.yml‎

Lines changed: 13 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,27 +1,20 @@
11
---
22
apiUsers:
3-
- {
4-
name: "dashboard",
5-
password: "secret",
3+
- name: "dashboard"
4+
password: "secret"
65
scopes: [ READ, CHANGE_REQUEST_SP,CHANGE_REQUEST_IDP, TEST, POLICIES ]
7-
}
8-
- {
9-
name: "pdp",
10-
password: "secret",
6+
- name: "pdp"
7+
password: "secret"
118
scopes: [READ]
12-
}
13-
- {
14-
name: "stats",
15-
password: "secret",
9+
- name: "stats"
10+
password: "secret"
1611
scopes: [READ]
17-
}
18-
- {
19-
name: "sp-dashboard",
20-
password: "secret",
12+
- name: "sp-dashboard"
13+
password: "secret"
2114
scopes: [ READ, WRITE_SP, PUSH, CHANGE_REQUEST_SP, TEST ]
22-
}
23-
- {
24-
name: "sysadmin",
25-
password: "secret",
15+
- name: "sysadmin"
16+
password: "secret"
17+
scopes: [ READ, WRITE_IDP, WRITE_SP, PUSH, SYSTEM ]
18+
- name: "sram"
19+
password: "secret"
2620
scopes: [ READ, WRITE_IDP, WRITE_SP, PUSH, SYSTEM ]
27-
}

‎core/sbs/config/config.yml‎

Lines changed: 19 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,9 @@ redis:
1515

1616
socket_url: 0.0.0.0:8080/
1717

18+
logging:
19+
log_to_stdout: True
20+
1821
api_users:
1922
- name: "sysadmin"
2023
password: "secret"
@@ -40,6 +43,7 @@ oidc:
4043
#Note that the paths for these uri's is hardcoded and only domain and port differ per environment
4144
redirect_uri: http://http://sbs.dev.openconext.local/api/users/resume-session
4245
continue_eduteams_redirect_uri: http://sbs.dev.openconext.local/continue
46+
continue_eb_redirect_uri: https://engine.(.*)openconext.local
4347
second_factor_authentication_required: True
4448
totp_token_name: "SRAM local"
4549
# The client_id of SBS. Most likely to equal the oidc.client_id
@@ -87,10 +91,11 @@ mail:
8791
environment: local
8892

8993
manage:
90-
enabled: false
91-
base_url: ""
92-
user: ""
93-
password: ""
94+
enabled: true
95+
base_url: "https://manage.dev.openconext.local/"
96+
user: "sram"
97+
password: "secret"
98+
verify_peer: False
9499

95100
aup:
96101
version: 1
@@ -255,3 +260,13 @@ rate_limit_totp_guesses_per_30_seconds: 10
255260
excluded_user_accounts:
256261
- uid: "urn:paul"
257262
- uid: "urn:peter"
263+
264+
stress_test:
265+
num_users: 1
266+
num_orgs: 1
267+
num_collaborations: 2
268+
num_services: 1
269+
num_groups: 1
270+
271+
engine_block:
272+
api_token: secret

‎core/sbs/docker-compose.override.yml‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,10 @@ services:
3030
timeout: 5s
3131
retries: 10
3232
hostname: sbs-client.docker
33-
command: "yarn start"
33+
command:
34+
- "sh"
35+
- "-c"
36+
- "yarn install && yarn build --disable-warning && yarn start"
3437
profiles:
3538
- "sbs"
3639

‎core/start‎

Lines changed: 0 additions & 4 deletions
This file was deleted.

0 commit comments

Comments
 (0)