X-Git-Url: https://osm.etsi.org/gitweb/?p=osm%2FNBI.git;a=blobdiff_plain;f=osm_nbi%2Fnbi.cfg;h=9255a8cba6d7903b4baaea784dfea886d3eec11b;hp=5d5a22fc1db731d9fdb8f4488902e946e9315205;hb=22577435288d15904b339b2ad3d580f9ad2edc6f;hpb=4c57e2e64537d6263c618da58bcd8f8767b8076e diff --git a/osm_nbi/nbi.cfg b/osm_nbi/nbi.cfg index 5d5a22f..9255a8c 100644 --- a/osm_nbi/nbi.cfg +++ b/osm_nbi/nbi.cfg @@ -1,3 +1,16 @@ +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or +# implied. +# See the License for the specific language governing permissions and +# limitations under the License. + [/] # tools.secureheaders.on = True tools.sessions.on = True @@ -26,15 +39,14 @@ server.ssl_module: "builtin" server.ssl_certificate: "./http/cert.pem" server.ssl_private_key: "./http/privkey.pem" server.ssl_pass_phrase: "osm4u" -server.thread_pool: 1 - -# Only for test. It works without authorization using the provided user and project: -# test.user_not_authorized: "admin" -# test.project_not_authorized: "admin" +server.thread_pool: 10 # Uncomment for allow basic authentication apart from bearer # auth.allow_basic_authentication: True +# comment or set to False to disable /test URL +server.enable_test: True + log.screen: False log.access_file: "" log.error_file: "" @@ -52,10 +64,13 @@ name: "osm" # password: "password" # commonkey: "commonkey" +[prometheus] +host: "prometheus" #hostname or IP +port: 9090 + loglevel: "DEBUG" #logfile: /var/log/osm/nbi-database.log - [storage] driver: "local" # local filesystem # for local provide file path @@ -73,6 +88,18 @@ port: 9092 loglevel: "DEBUG" #logfile: /var/log/osm/nbi-message.log +group_id: "nbi-server" [authentication] -backend: "internal" +backend: "internal" # internal or keystone +# for keystone backend a comma separated list of user adn project _domain_name list can ba provided. +# NBI will try authenticate with all of then if domain is not provided in the content of a POST token +# user_domain_name: "default,ldap" +# project_domain_name: "default,ldap" + +# Only for test. It works without authorization using the provided user and project: +# user_not_authorized: "admin" +# project_not_authorized: "admin" + +[rbac] +# roles_to_operations: "roles_to_operations.yml" # initial role generation when database