Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 1 | ### |
| 2 | # ============LICENSE_START======================================================= |
| 3 | # ONAP-PDP-REST |
| 4 | # ================================================================================ |
Michael Mokry | c5d97e8 | 2018-02-05 09:48:59 -0600 | [diff] [blame] | 5 | # Copyright (C) 2017-2018 AT&T Intellectual Property. All rights reserved. |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 6 | # ================================================================================ |
| 7 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 8 | # you may not use this file except in compliance with the License. |
| 9 | # You may obtain a copy of the License at |
| 10 | # |
| 11 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | # |
| 13 | # Unless required by applicable law or agreed to in writing, software |
| 14 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 15 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | # See the License for the specific language governing permissions and |
| 17 | # limitations under the License. |
| 18 | # ============LICENSE_END========================================================= |
| 19 | ### |
| 20 | |
| 21 | # Default XACML Properties File for PDP RESTful servlet |
Michael Mokry | 7608848 | 2018-10-30 16:51:57 -0500 | [diff] [blame^] | 22 | # NOTE: All properties in this file are for local development environments only. |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 23 | # Standard API Factories |
| 24 | # |
| 25 | xacml.dataTypeFactory=com.att.research.xacml.std.StdDataTypeFactory |
| 26 | xacml.pdpEngineFactory=com.att.research.xacmlatt.pdp.ATTPDPEngineFactory |
| 27 | xacml.pepEngineFactory=com.att.research.xacml.std.pep.StdEngineFactory |
| 28 | # NOT USED SEE BELOW xacml.pipFinderFactory=org.onap.policy.xacml.std.pip.StdPIPFinderFactory |
| 29 | xacml.traceEngineFactory=com.att.research.xacml.std.trace.LoggingTraceEngineFactory |
| 30 | # |
| 31 | # AT&T PDP Implementation Factories |
| 32 | # |
| 33 | xacml.att.evaluationContextFactory=com.att.research.xacmlatt.pdp.std.StdEvaluationContextFactory |
| 34 | xacml.att.combiningAlgorithmFactory=com.att.research.xacmlatt.pdp.std.StdCombiningAlgorithmFactory |
| 35 | xacml.att.functionDefinitionFactory=org.onap.policy.xacml.custom.OnapFunctionDefinitionFactory |
| 36 | # NOT USED SEE BELOW xacml.att.policyFinderFactory=org.onap.policy.pdp.std.StdPolicyFinderFactory |
| 37 | # creteUpdate Policy Implementation Class details. |
| 38 | createUpdatePolicy.impl.className=org.onap.policy.pdp.rest.api.services.CreateUpdatePolicyServiceImpl |
| 39 | # AAF Implementation class details |
| 40 | aafClient.impl.className=org.onap.policy.utils.AAFPolicyClientImpl |
| 41 | # |
| 42 | # AT&T RESTful PDP Implementation Factories |
| 43 | # |
| 44 | xacml.pipFinderFactory=org.onap.policy.pdp.rest.impl.XACMLPdpPIPFinderFactory |
| 45 | xacml.att.policyFinderFactory=org.onap.policy.pdp.rest.XACMLPdpPolicyFinderFactory |
| 46 | # |
| 47 | # When set to true, this flag tells the StdPolicyFinderFactory to combined all the root policy files into |
| 48 | # into one PolicySet and use the given Policy Algorithm. |
| 49 | # |
| 50 | xacml.att.policyFinderFactory.combineRootPolicies=urn:com:att:xacml:3.0:policy-combining-algorithm:combined-permit-overrides |
| 51 | # |
| 52 | # PDP RESTful API properties |
| 53 | # |
| 54 | # Set this to the address where the XACML-PAP-REST servlet is running |
| 55 | xacml.rest.pap.url=http://localhost:8070/pap/ |
| 56 | |
| 57 | #if multiple paps exist, the xacml.rest.pap.url can be removed and they can be defined like this: |
| 58 | #xacml.rest.pap.urls=http://localhost:9090/pap/,http://localhost:9091/pap/ |
| 59 | |
| 60 | # |
| 61 | # Give the running PDP an ID for the PAP. The url that its running as is a good choice. |
| 62 | # The PAP identifies PDP's using the URL of the PDP. |
| 63 | # |
| 64 | xacml.rest.pdp.id=http://localhost:8082/pdp/ |
| 65 | |
| 66 | # Give the port number used for the PDP |
| 67 | |
| 68 | xacml.jmx.port=0 |
| 69 | |
| 70 | |
| 71 | # Notification Properties |
| 72 | # Notifcation type: websocket, ueb or dmaap... if left blank websocket is the default |
| 73 | NOTIFICATION_TYPE=websocket |
| 74 | NOTIFICATION_SERVERS= |
| 75 | NOTIFICATION_TOPIC= |
| 76 | NOTIFICATION_DELAY= |
| 77 | UEB_API_KEY= |
| 78 | UEB_API_SECRET= |
| 79 | DMAAP_AAF_LOGIN= |
| 80 | DMAAP_AAF_PASSWORD= |
| 81 | |
| 82 | # |
| 83 | # Set the directory where the PDP holds its Policy Cache and PIP Configuration |
| 84 | # |
| 85 | xacml.rest.pdp.config=config |
| 86 | |
| 87 | xacml.rest.pdp.webapps=/home/users/PolicyEngine/webapps/ConfigPAP/ |
| 88 | # |
| 89 | # Initialize register with PAP servlet |
| 90 | # |
| 91 | xacml.rest.pdp.register=true |
| 92 | # |
| 93 | # Sleep period in seconds between register attempts |
| 94 | # |
| 95 | xacml.rest.pdp.register.sleep=15 |
| 96 | # |
| 97 | # number of attempts to register. -1 means keep trying forever. |
| 98 | # |
| 99 | xacml.rest.pdp.register.retries=-1 |
| 100 | # |
| 101 | # max number of bytes in a POST of a XML/JSON request |
| 102 | # old value #32767 |
| 103 | xacml.rest.pdp.maxcontent=99999999 |
| 104 | # |
| 105 | # Set UserID here |
| 106 | xacml.rest.pdp.userid=testpdp |
| 107 | # Set Password here |
| 108 | xacml.rest.pdp.password=alpha456 |
| 109 | |
| 110 | # id PAP |
| 111 | xacml.rest.pap.userid=testpap |
| 112 | #if multiple paps have different logins, they can be defined like this: |
| 113 | #http\://localhost\:9090/pap/.xacml.rest.pap.userid=testpap |
| 114 | |
| 115 | # pass PAP |
| 116 | xacml.rest.pap.password=alpha123 |
| 117 | #http\://localhost\:9090/pap/.xacml.rest.pap.password=alpha123 |
| 118 | |
| 119 | # Delay for Notifications Don't change this. Value in milliSec. |
| 120 | xacml.rest.notification.delay=30 |
Tej, Tarun | e038592 | 2017-09-15 00:52:13 -0400 | [diff] [blame] | 121 | |
| 122 | # Client interval to ping notification service. |
| 123 | CLIENT_INTERVAL=15000 |
| 124 | |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 125 | # Buffer Size. |
Michael Mokry | c5d97e8 | 2018-02-05 09:48:59 -0600 | [diff] [blame] | 126 | REQUEST_BUFFER_SIZE=50 |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 127 | |
| 128 | #properties for MySql xacml database: PLEASE DO NOT REMOVE... NEEDED FOR APIs |
rb7147 | 92a628e | 2017-09-21 13:51:10 -0400 | [diff] [blame] | 129 | javax.persistence.jdbc.driver=org.mariadb.jdbc.Driver |
| 130 | javax.persistence.jdbc.url=jdbc:mariadb://localhost:3306/onap_sdk |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 131 | javax.persistence.jdbc.user=policy_user |
| 132 | javax.persistence.jdbc.password=policy_user |
| 133 | |
| 134 | |
| 135 | #***Properties for IntegrityMonitor integration defined in XACMLRestProperties.java*** |
| 136 | |
| 137 | #The name of the PDP. Must be unique across the system |
| 138 | xacml.rest.pdp.resource.name=site_1.pdp_1 |
| 139 | |
| 140 | #***Properties for IntegrityMonitor integration defined in IntegrityMonitorProperties.java*** |
| 141 | |
| 142 | #Interval between forward progress counter updates in seconds |
| 143 | fp_monitor_interval=30 |
| 144 | |
| 145 | #Number of forward progress counter failures before failover |
| 146 | failed_counter_threshold=3 |
| 147 | |
| 148 | #Interval in seconds between test transactions if there is no other traffic |
| 149 | test_trans_interval=10 |
| 150 | |
| 151 | #Interval in seconds between updates of the forward progress counter in the DB |
| 152 | write_fpc_interval=5 |
| 153 | |
| 154 | #Name of the site |
| 155 | site_name=site_1 |
| 156 | |
| 157 | #Node type |
| 158 | node_type=pdp_xacml |
| 159 | |
| 160 | #Dependency groups are groups of resources upon which a node operational state is dependent upon). |
| 161 | #Each group is a comma-separated list of resource names and groups are separated by a semicolon. |
| 162 | #A group may contain one or more members. Resource names must match the resource names defined |
| 163 | #in the respective servers' properties files |
| 164 | dependency_groups=site_1.pdplp_1;site_1.astragw_1;site_1.brmsgw_1 |
| 165 | |
| 166 | # this can be DEVL, TEST, PROD |
| 167 | ENVIRONMENT=DEVL |
Michael Mokry | 7608848 | 2018-10-30 16:51:57 -0500 | [diff] [blame^] | 168 | xacml.rest.pep.idfile=client.properties |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 169 | |
Michael Mokry | 7608848 | 2018-10-30 16:51:57 -0500 | [diff] [blame^] | 170 | |
| 171 | #AAF cadi properties |
| 172 | enable_aaf=false |
| 173 | policy.aaf.namespace=org.onap.policy |
| 174 | policy.aaf.root.permission=org.onap.policy.pdpx |
| 175 | cm_url=https://aaf-onap-test.osaaf.org:8095/AAF_NS.cm:2.1 |
| 176 | cadi_latitude=38.000 |
| 177 | cadi.longitude=72.000 |
| 178 | cadi_alias=policy@policy.onap.org |
| 179 | cadi_loglevel=DEBUG |
| 180 | cadi_keyfile=/media/sf_SourceTree/gerrit-pe/engine/packages/base/src/files/etc/ssl/aaf-cadi.keyfile |
| 181 | cadi_protocols=TLSv1.1,TLSv1.2 |
| 182 | cadi_x509_issuers=CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_7, OU=OSAAF, O=ONAP, C=US |
| 183 | cadi_keystore=/media/sf_SourceTree/gerrit-pe/engine/packages/base/src/files/etc/ssl/policy-keystore |
| 184 | cadi_keystore_password=Pol1cy_0nap |
| 185 | cadi_truststore=/media/sf_SourceTree/gerrit-pe/engine/packages/base/src/files/etc/ssl/policy-truststore |
| 186 | cadi_truststore_password=Pol1cy_0nap |
| 187 | aaf_env=DEV |
| 188 | aaf_url=https://aaf-onap-test.osaaf.org:8095/AAF_NS.service:2.1 |
| 189 | aaf_fqdn=aaf-onap-test.osaaf.org |
| 190 | aaf_oauth2_introspect_url=https://aaf-onap-test.osaaf.org:8095/AAF_NS.introspect:2.1/introspect |
| 191 | aaf_oauth2_token_url=https://aaf-onap-test.osaaf.org:8095/AAF_NS.token:2.1/token |
| 192 | fs_url=https://aaf-onap-test.osaaf.org:8095/AAF_NS.fs.2.1 |
| 193 | gui_url=https://aaf-onap-test.osaaf.org:8095/AAF_NS.gui.2.1 |
| 194 | |
| 195 | |
Guo Ruijing | 073cc18 | 2017-07-31 08:47:35 +0000 | [diff] [blame] | 196 | # Decision Response settings. |
| 197 | # can be either PERMIT or DENY. |
| 198 | decision.indeterminate.response=PERMIT |