From 375666c83803e8afadd86c7255dd2777f5a2c0e3 Mon Sep 17 00:00:00 2001
From: Ravi Geda <gravik@amdocs.com>
Date: Sun, 30 Sep 2018 21:14:41 +0100
Subject: Add Pluggable Security to Gizmo

Note that by default this feature is turned off. To enable update the
installSidecarSecurity in aai/values.yaml to true.

Change-Id: If4c32b55aa6d8e123c9e86015ff084848fd01c25
Issue-ID: AAI-1694
Signed-off-by: Ravi Geda <gravik@amdocs.com>
---
 .../resources/fproxy/config/auth/client-cert.p12   | Bin 0 -> 2556 bytes
 .../resources/fproxy/config/auth/tomcat_keystore   | Bin 0 -> 2214 bytes
 .../resources/fproxy/config/fproxy.properties      |   2 +
 .../resources/fproxy/config/logback-spring.xml     |  48 +++++++++++++++++++++
 .../aai-gizmo/resources/fproxy/config/readme.txt   |   1 +
 5 files changed, 51 insertions(+)
 create mode 100644 charts/aai-gizmo/resources/fproxy/config/auth/client-cert.p12
 create mode 100644 charts/aai-gizmo/resources/fproxy/config/auth/tomcat_keystore
 create mode 100644 charts/aai-gizmo/resources/fproxy/config/fproxy.properties
 create mode 100644 charts/aai-gizmo/resources/fproxy/config/logback-spring.xml
 create mode 100644 charts/aai-gizmo/resources/fproxy/config/readme.txt

(limited to 'charts/aai-gizmo/resources/fproxy')

diff --git a/charts/aai-gizmo/resources/fproxy/config/auth/client-cert.p12 b/charts/aai-gizmo/resources/fproxy/config/auth/client-cert.p12
new file mode 100644
index 0000000..dbf4fca
Binary files /dev/null and b/charts/aai-gizmo/resources/fproxy/config/auth/client-cert.p12 differ
diff --git a/charts/aai-gizmo/resources/fproxy/config/auth/tomcat_keystore b/charts/aai-gizmo/resources/fproxy/config/auth/tomcat_keystore
new file mode 100644
index 0000000..9eec841
Binary files /dev/null and b/charts/aai-gizmo/resources/fproxy/config/auth/tomcat_keystore differ
diff --git a/charts/aai-gizmo/resources/fproxy/config/fproxy.properties b/charts/aai-gizmo/resources/fproxy/config/fproxy.properties
new file mode 100644
index 0000000..f512fb7
--- /dev/null
+++ b/charts/aai-gizmo/resources/fproxy/config/fproxy.properties
@@ -0,0 +1,2 @@
+credential.cache.timeout.ms=180000
+transactionid.header.name=X-TransactionId
\ No newline at end of file
diff --git a/charts/aai-gizmo/resources/fproxy/config/logback-spring.xml b/charts/aai-gizmo/resources/fproxy/config/logback-spring.xml
new file mode 100644
index 0000000..3a35b76
--- /dev/null
+++ b/charts/aai-gizmo/resources/fproxy/config/logback-spring.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+
+    <property name="LOGS" value="./logs/AAF-FPS" />
+    <property name="FILEPREFIX" value="application" />
+
+    <appender name="Console"
+        class="ch.qos.logback.core.ConsoleAppender">
+        <layout class="ch.qos.logback.classic.PatternLayout">
+            <Pattern>
+                %d{ISO8601} %-5level [%t] %C{1.}: %msg%n%throwable
+            </Pattern>
+        </layout>
+    </appender>
+
+    <appender name="RollingFile"
+        class="ch.qos.logback.core.rolling.RollingFileAppender">
+        <file>${LOGS}/${FILEPREFIX}.log</file>
+        <encoder
+            class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">
+            <Pattern>%d %p %C{1.} [%t] %m%n</Pattern>
+        </encoder>
+
+        <rollingPolicy
+            class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
+            <!-- rollover daily and when the file reaches 10 MegaBytes -->
+            <fileNamePattern>${LOGS}/archived/${FILEPREFIX}-%d{yyyy-MM-dd}.%i.log
+            </fileNamePattern>
+            <timeBasedFileNamingAndTriggeringPolicy
+                class="ch.qos.logback.core.rolling.SizeAndTimeBasedFNATP">
+                <maxFileSize>10MB</maxFileSize>
+            </timeBasedFileNamingAndTriggeringPolicy>
+        </rollingPolicy>
+    </appender>
+
+    <!-- LOG everything at INFO level -->
+    <root level="info">
+        <appender-ref ref="RollingFile" />
+        <appender-ref ref="Console" />
+    </root>
+
+    <!-- LOG "com.baeldung*" at TRACE level -->
+    <logger name="org.onap.aaf.fproxy" level="trace" additivity="false">
+        <appender-ref ref="RollingFile" />
+        <appender-ref ref="Console" />
+    </logger>
+
+</configuration>
\ No newline at end of file
diff --git a/charts/aai-gizmo/resources/fproxy/config/readme.txt b/charts/aai-gizmo/resources/fproxy/config/readme.txt
new file mode 100644
index 0000000..79cf29e
--- /dev/null
+++ b/charts/aai-gizmo/resources/fproxy/config/readme.txt
@@ -0,0 +1 @@
+Relevant configuration files need to be copied here to successfully run this service locally.
\ No newline at end of file
-- 
cgit 1.2.3-korg