saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 1 | ### |
| 2 | # ============LICENSE_START======================================================= |
| 3 | # ONAP POLICY-DOCKER |
| 4 | # ================================================================================ |
| 5 | # Copyright (C) 2022 Nordix Foundation. |
| 6 | # ================================================================================ |
| 7 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 8 | # you may not use this file except in compliance with the License. |
| 9 | # You may obtain a copy of the License at |
| 10 | # |
| 11 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | # |
| 13 | # Unless required by applicable law or agreed to in writing, software |
| 14 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 15 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | # See the License for the specific language governing permissions and |
| 17 | # limitations under the License. |
| 18 | # |
| 19 | # SPDX-License-Identifier: Apache-2.0 |
| 20 | # ============LICENSE_END============================================ |
| 21 | # =================================================================== |
| 22 | # |
| 23 | ### |
| 24 | |
| 25 | ### Set the port for HTTP or HTTPS protocol (Controlled by Spring framework, only one at a time). |
| 26 | ### (See below for the parameter 'server.http.port' if you want to have both enabled) |
| 27 | ### To have only HTTP, keep the lines server.ssl.* commented |
| 28 | ### To have only HTTPS enabled, uncomment the server.ssl.* lines and specify a right keystore location |
| 29 | ### server.port=8080 |
| 30 | ### Settings for HTTPS (this automatically enables the HTTPS on the port 'server.port') |
| 31 | #server.ssl.key-store=file:/tmp/mykey.jks |
| 32 | #server.ssl.key-store-password=pass |
| 33 | #server.ssl.key-password=pass |
| 34 | |
| 35 | ### In order to be user friendly when HTTPS is enabled, |
| 36 | ### you can add another HTTP port that will be automatically redirected to HTTPS |
| 37 | ### by enabling this parameter (server.http.port) and set it to another port (80 or 8080, 8090, etc ...) |
| 38 | #server.http-to-https-redirection.port=8090 |
| 39 | |
| 40 | ### HTTP Example: |
| 41 | ###-------------- |
| 42 | ### server.port=8080 |
| 43 | |
| 44 | ### HTTPS Example: |
| 45 | ### -------------- |
| 46 | ### server.port=8443 |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 47 | #server.ssl.key-store=file:/opt/policy/clamp/policy-keystore |
| 48 | #server.ssl.key-store-password=enc:qWxBtY7w9h5Hl72vQKgI5G1qqyRIuBarQqMkVDHqZmd |
| 49 | #server.ssl.key-password=enc:qWxBtY7w9h5Hl72vQKgI5G1qqyRIuBarQqMkVDHqZmd |
| 50 | #server.ssl.key-store-type=jks |
| 51 | server.port=8445 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 52 | ## Config part for Server certificates |
| 53 | # Can be a classpath parameter instead of file:/ |
| 54 | #server.ssl.key-store=classpath:/clds/aaf/org.onap.clamp.p12 |
| 55 | #server.ssl.key-store-password=enc:YZs7M6IftyPjHniTa6J7G2416hssb8qI-Av8D1b8pPS |
| 56 | #server.ssl.key-password=enc:YZs7M6IftyPjHniTa6J7G2416hssb8qI-Av8D1b8pPS |
| 57 | |
| 58 | ## Config part for Client certificates |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 59 | #server.ssl.client-auth=want |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 60 | #server.ssl.trust-store=classpath:/clds/aaf/truststoreONAPall.jks |
| 61 | #server.ssl.trust-store-password=enc:iDnPBBLq_EMidXlMa1FEuBR8TZzYxrCg66vq_XfLHdJ |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 62 | #server.ssl.trust-store=file:/opt/policy/clamp/policy-truststore |
| 63 | #server.ssl.trust-store-password=enc:qWxBtY7w9h5Hl72vQKgI5G1qqyRIuBarQqMkVDHqZmd |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 64 | |
| 65 | # The key file used to decode the key store and trust store password |
| 66 | # If not defined, the key store and trust store password will not be decrypted |
| 67 | #clamp.config.keyFile=classpath:/clds/aaf/org.onap.clamp.keyfile |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 68 | #clamp.config.keyFile=file:/opt/policy/clamp/clamp-be-keyfile |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 69 | |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 70 | server.http-to-https-redirection.port=8080 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 71 | |
| 72 | server.servlet.context-path=/ |
| 73 | #Modified engine-rest applicationpath |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 74 | spring.profiles.active=clamp-default,clamp-default-user,clamp-policy-controller,default-dictionary-elements |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 75 | spring.http.converters.preferred-json-mapper=gson |
| 76 | |
| 77 | #The max number of active threads in this pool |
| 78 | server.tomcat.max-threads=200 |
| 79 | #The minimum number of threads always kept alive |
| 80 | server.tomcat.min-Spare-Threads=25 |
| 81 | #The number of milliseconds before an idle thread shutsdown, unless the number of active threads are less or equal to minSpareThreads |
| 82 | server.tomcat.max-idle-time=60000 |
| 83 | |
| 84 | #Servlet context parameters |
| 85 | server.context_parameters.p-name=value #context parameter with p-name as key and value as value. |
| 86 | |
| 87 | camel.springboot.consumer-template-cache-size=1000 |
| 88 | camel.springboot.producer-template-cache-size=1000 |
| 89 | camel.springboot.jmx-enabled=true |
| 90 | camel.defaultthreadpool.poolsize=10 |
| 91 | camel.defaultthreadpool.maxpoolsize=20 |
| 92 | camel.defaultthreadpool.maxqueuesize=1000 |
| 93 | camel.defaultthreadpool.keepaliveTime=60 |
| 94 | camel.defaultthreadpool.rejectpolicy=CallerRuns |
| 95 | camel.springboot.xml-routes=classpath:/clds/camel/routes/*.xml |
| 96 | camel.springboot.xml-rests=classpath:/clds/camel/rest/*.xml |
| 97 | camel.springboot.backlog-tracing=true |
| 98 | camel.springboot.tracing=true |
| 99 | |
| 100 | #clds datasource connection details |
| 101 | spring.datasource.driverClassName=org.mariadb.jdbc.Driver |
| 102 | spring.datasource.url=jdbc:mariadb:sequential://${MARIADB_HOST}:3306/policyclamp?autoReconnect=true&connectTimeout=10000&socketTimeout=10000&retriesAllDown=3 |
| 103 | spring.datasource.username=policy_user |
| 104 | spring.datasource.password=policy_user |
| 105 | spring.datasource.validationQuery=SELECT 1 |
| 106 | spring.datasource.validationQueryTimeout=20000 |
| 107 | spring.datasource.validationInterval=30000 |
| 108 | spring.datasource.testWhileIdle = true |
| 109 | spring.datasource.minIdle = 0 |
| 110 | spring.datasource.initialSize=0 |
| 111 | # Automatically test whether a connection provided is good or not |
| 112 | spring.datasource.testOnBorrow=true |
| 113 | spring.datasource.ignoreExceptionOnPreLoad=true |
| 114 | # control the sql db initialization (from schema.sql and data.sql) |
| 115 | spring.datasource..initialize=false |
| 116 | |
| 117 | spring.jpa.properties.javax.persistence.schema-generation.database.action=none |
| 118 | s#pring.jpa.properties.javax.persistence.schema-generation.create-source=metadata |
| 119 | #spring.jpa.properties.javax.persistence.schema-generation.scripts.action=create |
| 120 | #spring.jpa.properties.javax.persistence.schema-generation.scripts.create-target=create.sql |
| 121 | # disable Hibernate DDL generation because the schema will be generated from a sql script |
| 122 | spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.MySQL5InnoDBDialect |
| 123 | spring.jpa.properties.hibernate.ddl-auto=validate |
| 124 | spring.jpa.properties.hibernate.hbm2ddl.delimiter=; |
| 125 | spring.jpa.properties.hibernate.format_sql=true |
| 126 | spring.jpa.properties.hibernate.use-new-id-generator-mappings=true |
| 127 | |
| 128 | # Whether to enable logging of SQL statements. |
| 129 | #spring.jpa.show-sql=true |
| 130 | |
| 131 | #Async Executor default Parameters |
| 132 | async.core.pool.size=10 |
| 133 | async.max.pool.size=20 |
| 134 | async.queue.capacity=500 |
| 135 | |
| 136 | #For logback file |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 137 | clamp.config.logback.path=/opt/policy/clamp/config |
| 138 | clamp.config.logback.filename=logback.xml |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 139 | #The log folder that will be used in logback.xml file |
liamfallon | c4bd9e4 | 2022-09-08 09:56:47 +0100 | [diff] [blame^] | 140 | clamp.config.log.path=/var/log/onap/policy/clamp |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 141 | clamp.config.files.systemProperties=classpath:/system.properties |
| 142 | clamp.config.files.cldsUsers=classpath:/clds/clds-users.json |
| 143 | clamp.config.files.globalProperties=classpath:/clds/templates/globalProperties.json |
| 144 | clamp.config.files.sdcController=classpath:/clds/sdc-controllers-config.json |
| 145 | |
| 146 | clamp.config.httpclient.socketTimeout=60000 |
| 147 | clamp.config.httpclient.connectTimeout=10000 |
| 148 | |
| 149 | # |
| 150 | # Configuration Settings for Policy Engine Components |
liamfallon | faac45b | 2022-09-01 12:05:47 +0100 | [diff] [blame] | 151 | clamp.config.policy.api.url=http://${POLICY_API_HOST}:6969 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 152 | clamp.config.policy.api.userName=policyadmin |
| 153 | clamp.config.policy.api.password=zb!XztG34 |
liamfallon | faac45b | 2022-09-01 12:05:47 +0100 | [diff] [blame] | 154 | clamp.config.policy.pap.url=http://${POLICY_PAP_HOST}:6969 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 155 | clamp.config.policy.pap.userName=policyadmin |
| 156 | clamp.config.policy.pap.password=zb!XztG34 |
| 157 | |
| 158 | # |
| 159 | # Sdc service properties |
| 160 | clamp.config.sdc.csarFolder = /tmp/sdc-controllers |
| 161 | |
| 162 | #DCAE Inventory Url Properties |
liamfallon | faac45b | 2022-09-01 12:05:47 +0100 | [diff] [blame] | 163 | clamp.config.dcae.inventory.url=http://localhost:8085 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 164 | clamp.config.dcae.intentory.retry.interval=10000 |
| 165 | clamp.config.dcae.intentory.retry.limit=5 |
| 166 | |
| 167 | #DCAE Deployment Url Properties |
liamfallon | faac45b | 2022-09-01 12:05:47 +0100 | [diff] [blame] | 168 | clamp.config.dcae.deployment.url=http://localhost:8085 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 169 | clamp.config.dcae.deployment.userName=test |
| 170 | clamp.config.dcae.deployment.password=test |
| 171 | |
| 172 | #Define user permission related parameters, the permission type can be changed but MUST be redefined in clds-users.properties in that case ! |
| 173 | clamp.config.security.permission.type.cl=org.onap.clamp.clds.cl |
| 174 | clamp.config.security.permission.type.cl.manage=org.onap.clamp.clds.cl.manage |
| 175 | clamp.config.security.permission.type.cl.event=org.onap.clamp.clds.cl.event |
| 176 | clamp.config.security.permission.type.filter.vf=org.onap.clamp.clds.filter.vf |
| 177 | clamp.config.security.permission.type.template=org.onap.clamp.clds.template |
| 178 | clamp.config.security.permission.type.tosca=org.onap.clamp.clds.tosca |
| 179 | clamp.config.security.permission.type.policies=org.onap.clamp.clds.policies |
| 180 | #This one indicates the type of instances (dev|prod|perf...), this must be set accordingly in clds-users.properties |
| 181 | clamp.config.security.permission.instance=dev |
| 182 | clamp.config.security.authentication.class=org.onap.aaf.cadi.principal.X509Principal, org.onap.aaf.cadi.principal.CachedBasicPrincipal |
| 183 | |
| 184 | ## Tosca converter |
| 185 | clamp.config.tosca.converter.json.schema.templates=classpath:/clds/tosca-converter/templates.json |
| 186 | clamp.config.tosca.converter.default.datatypes=classpath:/clds/tosca-converter/default-tosca-types.yaml |
| 187 | clamp.config.tosca.converter.dictionary.support.enabled=true |
| 188 | |
| 189 | # Configuration settings for CDS |
liamfallon | faac45b | 2022-09-01 12:05:47 +0100 | [diff] [blame] | 190 | clamp.config.cds.url=http://cds-blueprints-processor-http:8080 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 191 | clamp.config.cds.userName=ccsdkapps |
| 192 | clamp.config.cds.password=ccsdkapps |
| 193 | |
| 194 | # Configuration settings for ControlLoop Runtime Rest API |
liamfallon | faac45b | 2022-09-01 12:05:47 +0100 | [diff] [blame] | 195 | clamp.config.acm.runtime.url=http://${RUNTIME_HOST}:6969 |
saul.gill | 2642450 | 2022-03-15 11:56:01 +0000 | [diff] [blame] | 196 | clamp.config.acm.runtime.userName=runtimeUser |
| 197 | clamp.config.acm.runtime.password=zb!XztG34 |