You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
84 lines
3.9 KiB
84 lines
3.9 KiB
#Example deploy - mvn deploy -Dquarkus.profile=stage -Dquarkus.kubernetes.deploy=true |
|
# quarkus.rest-client."rest.CreateScanService".url=https://localhost:8080/ |
|
# quarkus.rest-client."rest.CreateScanService".scope=javax.inject.Singleton |
|
|
|
# couchdb.name=scan-results |
|
# couchdb.url=https://localhost:5984 |
|
|
|
# quarkus.hibernate-orm.database.generation=drop-and-create |
|
|
|
#temporary fix, we need to enable it with a working devservices setup |
|
%dev.quarkus.kerberos.enabled=false |
|
%dev.quarkus.security.auth.enabled-in-dev-mode=false |
|
#Also tried |
|
#%dev.quarkus.security.enabled=false |
|
#%dev.quarkus.http.auth.proactive=false |
|
#%dev.quarkus.http.auth.basic=false |
|
#%dev.quarkus.http.auth.permission.permit1.paths=/Ping/Ping |
|
#%dev.quarkus.http.auth.permission.permit1.policy=permit |
|
#%dev.quarkus.http.auth.permission.permit1.methods=GET,HEAD |
|
#%quarkus.arc.unremovable-types=io.quarkiverse.kerberos.*,io.quarkiverse.kerberos.KerberosPrincipal |
|
#%dev.quarkus.kerberos.keytab-path= HTTP_osh-pct-security-tooling.apps.ocp-c1.prod.psi.redhat.com@IPA.REDHAT.COM.keytab |
|
#%dev.quarkus.kerberos.service-principal-name= HTTP/osh-pct-security-tooling.apps.ocp-c1.prod.psi.redhat.com@IPA.REDHAT.COM |
|
|
|
########################################## |
|
# Data Source # |
|
########################################## |
|
%dev.quarkus.datasource.devservices.enabled=true |
|
%dev.quarkus.datasource.db-kind = postgresql |
|
%dev.quarkus.datasource.username = quarkus |
|
%dev.quarkus.datasource.password = quarkus |
|
#%dev.quarkus.datasource.jdbc.url = jdbc:postgresql://localhost:5432/hibernate_db |
|
%dev.quarkus.hibernate-orm.database.generation=drop-and-create |
|
|
|
%stage.quarkus.kubernetes-config.secrets.enabled=true |
|
quarkus.kubernetes-config.secrets=postgresql |
|
%stage.quarkus.datasource.jdbc.url=jdbc:postgresql://postgresql:5432/${database-name} |
|
%stage.quarkus.datasource.username=${database-user} |
|
%stage.quarkus.datasource.password=${database-password} |
|
%stage.quarkus.hibernate-orm.database.generation=drop-and-create |
|
|
|
|
|
#Always provide swagger ui |
|
quarkus.swagger-ui.always-include=true |
|
%dev.quarkus.openshift.service-account=osh-wrapper-client-sa |
|
%dev.quarkus.openshift.namespace=pct-security-tooling |
|
|
|
%stage.quarkus.openshift.name=osh |
|
%stage.quarkus.openshift.service-account=osh-wrapper-client-sa |
|
%stage.quarkus.openshift.labels.env=stage |
|
%stage.quarkus.log.level=DEBUG |
|
quarkus.arc.remove-unused-beans=false |
|
|
|
#Only in Quarkus > 3.x |
|
%stage.quarkus.openshift.route.tls.termination=edge |
|
#As we cant create a edge terminated route (quarkus <3.x) lets disable route creation for now |
|
%stage.quarkus.openshift.route.expose=false |
|
%stage.quarkus.openshift.route.target-port=https |
|
%stage.quarkus.openshift.route.tls.insecure-edge-termination-policy=redirect |
|
%stage.quarkus.openshift.namespace=pct-security-tooling |
|
|
|
########################################## |
|
# Kerberos Specifics # |
|
########################################## |
|
%stage.quarkus.openshift.secret-volumes.osh-wrapper.secret-name=kerberos-keytab-osh |
|
%stage.quarkus.openshift.mounts.osh-wrapper.path=/kerberos |
|
%stage.quarkus.openshift.mounts.osh-wrapper.read-only=true |
|
%stage.quarkus.kerberos.keytab-path= /kerberos/kerberos-keytab-osh |
|
%stage.quarkus.kerberos.service-principal-name= HTTP/osh-pct-security-tooling.apps.ocp-c1.prod.psi.redhat.com@IPA.REDHAT.COM |
|
|
|
%stage.quarkus.openshift.mounts.osh-wrapper-config-vol.path=/etc/krb5.conf |
|
%stage.quarkus.openshift.mounts.osh-wrapper-config-vol.sub-path=linux-krb5.conf |
|
%stage.quarkus.openshift.config-map-volumes.osh-wrapper-config-vol.config-map-name=kerberos-config |
|
%stage.quarkus.openshift.config-map-volumes.osh-wrapper-config-vol.items."linux-krb5.conf".path=linux-krb5.conf |
|
%stage.quarkus.openshift.mounts.osh-wrapper-config-vol.read-only=true |
|
|
|
########################################## |
|
# Tekton Specifics (Used in app) # |
|
########################################## |
|
tekton.pipeline.ref=osh-client-from-source |
|
tekton.task.ref=osh-scan-task |
|
tekton.service-account=${%stage.quarkus.openshift.service-account} |
|
|
|
|
|
|
|
|