Secure Kafka Authentication
[ccsdk/cds.git] / ms / blueprintsprocessor / application / src / main / resources / application.properties
1 #
2 #  Copyright (c) 2017-2019 AT&T, IBM, Bell Canada, Nordix Foundation.
3 #
4 #  Licensed under the Apache License, Version 2.0 (the "License");
5 #  you may not use this file except in compliance with the License.
6 #  You may obtain a copy of the License at
7 #
8 #      http://www.apache.org/licenses/LICENSE-2.0
9 #
10 #  Unless required by applicable law or agreed to in writing, software
11 #  distributed under the License is distributed on an "AS IS" BASIS,
12 #  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 #  See the License for the specific language governing permissions and
14 #  limitations under the License.
15 #
16 # Web server config
17 ### START -Controller Blueprints Properties
18 # Load Resource Source Mappings
19 resourceSourceMappings=processor-db=source-db,input=source-input,default=source-default,sdnc=source-rest,aai-data=source-rest,capability=source-capability,rest=source-rest,vault-data=source-rest,script=source-capability
20
21 # Controller Blueprints Core Configuration
22 blueprintsprocessor.blueprintDeployPath=/opt/app/onap/blueprints/deploy
23 blueprintsprocessor.blueprintArchivePath=/opt/app/onap/blueprints/archive
24 blueprintsprocessor.blueprintWorkingPath=/opt/app/onap/blueprints/working
25
26 # Controller Blueprint Load Configurations
27 blueprintsprocessor.loadBluePrintPaths=/opt/app/onap/model-catalog/blueprint-model
28 blueprintsprocessor.loadModeTypePaths=/opt/app/onap/model-catalog/definition-type
29 blueprintsprocessor.loadResourceDictionaryPaths=/opt/app/onap/model-catalog/resource-dictionary
30
31 # CBA file extension
32 controllerblueprints.loadCbaExtension=zip
33
34 ### END -Controller Blueprints Properties
35
36 blueprintsprocessor.grpcEnable=true
37 blueprintsprocessor.httpPort=8080
38 blueprintsprocessor.grpcPort=9111
39
40 # db
41 blueprintsprocessor.db.url=jdbc:mysql://db:3306/sdnctl
42 blueprintsprocessor.db.username=sdnctl
43 blueprintsprocessor.db.password=sdnctl
44 blueprintsprocessor.db.driverClassName=org.mariadb.jdbc.Driver
45 blueprintsprocessor.db.hibernateHbm2ddlAuto=update
46 blueprintsprocessor.db.hibernateDDLAuto=update
47 blueprintsprocessor.db.hibernateNamingStrategy=org.hibernate.cfg.ImprovedNamingStrategy
48 blueprintsprocessor.db.hibernateDialect=org.hibernate.dialect.MySQL5InnoDBDialect
49
50 # processor-db endpoint
51 blueprintsprocessor.db.processor-db.type=maria-db
52 blueprintsprocessor.db.processor-db.url=jdbc:mysql://mariadb-galera:3306/sdnctl
53 blueprintsprocessor.db.processor-db.username=root
54 blueprintsprocessor.db.processor-db.password=secretpassword
55
56 # Python executor
57 blueprints.processor.functions.python.executor.executionPath=/opt/app/onap/scripts/jython/ccsdk_blueprints
58 blueprints.processor.functions.python.executor.modulePaths=/opt/app/onap/scripts/jython/ccsdk_blueprints,/opt/app/onap/scripts/jython/ccsdk_netconf,/opt/app/onap/scripts/jython/ccsdk_restconf
59
60 security.user.password: {bcrypt}$2a$10$duaUzVUVW0YPQCSIbGEkQOXwafZGwQ/b32/Ys4R1iwSSawFgz7QNu
61 security.user.name: ccsdkapps
62
63 # Error Managements
64 error.catalog.applicationId=cds
65 error.catalog.type=properties
66 error.catalog.errorDefinitionDir=/opt/app/onap/config/
67
68 # Used in Health Check
69 #endpoints.user.name=ccsdkapps
70 #endpoints.user.password=ccsdkapps
71
72 # Executor Options
73 blueprintsprocessor.resourceResolution.enabled=true
74 blueprintsprocessor.netconfExecutor.enabled=true
75 blueprintsprocessor.restConfExecutor.enabled=true
76 blueprintsprocessor.cliExecutor.enabled=true
77 blueprintsprocessor.remoteScriptCommand.enabled=true
78
79 # Command executor
80 blueprintsprocessor.grpcclient.remote-python.type=token-auth
81 blueprintsprocessor.grpcclient.remote-python.host=localhost
82 blueprintsprocessor.grpcclient.remote-python.port=50051
83 blueprintsprocessor.grpcclient.remote-python.token=Basic Y2NzZGthcHBzOmNjc2RrYXBwcw==
84
85 # Py executor
86 blueprintsprocessor.grpcclient.py-executor.type=tls-auth
87 blueprintsprocessor.grpcclient.py-executor.host=py-executor-default:50052
88 blueprintsprocessor.grpcclient.py-executor.trustCertCollection=/opt/app/onap/config/certs/py-executor/py-executor-chain.pem
89
90 # Config Data REST client settings
91 blueprintsprocessor.restconfEnabled=true
92 blueprintsprocessor.restclient.sdnc.type=basic-auth
93 blueprintsprocessor.restclient.sdnc.url=http://sdnc:8282
94 blueprintsprocessor.restclient.sdnc.username=admin
95 blueprintsprocessor.restclient.sdnc.password=Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U
96
97 # Primary AAI Data REST Client settings
98 blueprintsprocessor.restclient.aai-data.type=basic-auth
99 blueprintsprocessor.restclient.aai-data.url=https://aai:8443
100 blueprintsprocessor.restclient.aai-data.username=aai@aai.onap.org
101 blueprintsprocessor.restclient.aai-data.password=demo123456!
102 blueprintsprocessor.restclient.aai-data.additionalHeaders.X-TransactionId=cds-transaction-id
103 blueprintsprocessor.restclient.aai-data.additionalHeaders.X-FromAppId=cds-app-id
104 blueprintsprocessor.restclient.aai-data.additionalHeaders.Accept=application/json
105
106 # Kafka audit service Configurations
107 ## Audit request
108 blueprintsprocessor.messageproducer.self-service-api.audit.kafkaEnable=false
109 blueprintsprocessor.messageproducer.self-service-api.audit.request.type=kafka-basic-auth
110 blueprintsprocessor.messageproducer.self-service-api.audit.request.bootstrapServers=127.0.0.1:9092
111 blueprintsprocessor.messageproducer.self-service-api.audit.request.clientId=audit-request-producer-client-id
112 blueprintsprocessor.messageproducer.self-service-api.audit.request.topic=audit-request-producer.t
113 #### Security settings
114 #### SSL
115 #blueprintsprocessor.messageproducer.self-service-api.audit.request.truststore=/path/to/truststore.jks
116 #blueprintsprocessor.messageproducer.self-service-api.audit.request.truststorePassword=truststorePassword
117 #blueprintsprocessor.messageproducer.self-service-api.audit.request.keystore=/path/to/keystore.jks
118 #blueprintsprocessor.messageproducer.self-service-api.audit.request.keystorePassword=keystorePassword
119 #### SCRAM
120 #blueprintsprocessor.messageproducer.self-service-api.audit.request.scramUsername=test-user
121 #blueprintsprocessor.messageproducer.self-service-api.audit.request.scramPassword=testUserPassword
122
123 ## Audit response
124 blueprintsprocessor.messageproducer.self-service-api.audit.response.type=kafka-basic-auth
125 blueprintsprocessor.messageproducer.self-service-api.audit.response.bootstrapServers=127.0.0.1:9092
126 blueprintsprocessor.messageproducer.self-service-api.audit.response.clientId=audit-response-producer-client-id
127 blueprintsprocessor.messageproducer.self-service-api.audit.response.topic=audit-response-producer.t
128
129 # Message prioritization kakfa properties, Enable if Prioritization service is needed
130 # Deploy message-prioritization function along with blueprintsprocessor application.
131 #blueprintsprocessor.messageconsumer.prioritize-input.type=kafka-streams-basic-auth
132 #blueprintsprocessor.messageconsumer.prioritize-input.bootstrapServers=127.0.0.1:9092
133 #blueprintsprocessor.messageconsumer.prioritize-input.applicationId=cds-controller
134 #blueprintsprocessor.messageconsumer.prioritize-input.topic=prioritize-input-topic
135
136 blueprintprocessor.remoteScriptCommand.enabled=true
137
138 #Encrypted username and password for health check service
139 endpoints.user.name=eHbVUbJAj4AG2522cSbrOQ==
140 endpoints.user.password=eHbVUbJAj4AG2522cSbrOQ==
141
142 #BaseUrls for health check blueprint processor services
143 blueprintprocessor.healthcheck.baseUrl=http://localhost:8080/
144 blueprintprocessor.healthcheck.mapping-service-name-with-service-link=[Execution service,/api/v1/execution-service/health-check],[Resources service,/api/v1/resources/health-check],[Template service,/api/v1/template/health-check]
145
146 #BaseUrls for health check Cds Listener services
147 cdslistener.healthcheck.baseUrl=http://cds-sdc-listener:8080/
148 cdslistener.healthcheck.mapping-service-name-with-service-link=[SDC Listener service,/api/v1/sdclistener/healthcheck]
149
150 #Actuator properties
151 management.endpoints.web.exposure.include=*
152 management.endpoint.health.show-details=always
153 management.info.git.mode=full