diff options
| author |   Sam Huang <sam.huang@yoppworks.com> | 2021-03-26 13:27:17 -0600 |
|---|---|---|
| committer |   Sylvain Desbureaux <sylvain.desbureaux@orange.com> | 2021-05-06 18:33:27 +0000 |
| commit | 56a6dd4a4fe0acd3a5ed25c5b601a1fa539215b8 (patch) | |
| tree | a10cb889c93629b41355dd613f9207f0af7be701 /kubernetes/aai/components/aai-traversal/values.yaml | |
| parent | 5308e409a6f0ccfdc3c6cfa649d5dbd6878671eb (diff) | |
[AAI] Keycloak integration into aai-traversal
In order to support multi-tenancy, keycloak(https://www.keycloak.org/)
as Identity and Access Management has been integrated into aai-traversal
and needs to be configured accordignly based on created instance
Issue-ID: AAI-3300
Signed-off-by: Sam Huang <sam.huang@yoppworks.com>
Change-Id: I393fb98ef6ac9cc6f4bf9d476cd682531d15011e
Diffstat (limited to 'kubernetes/aai/components/aai-traversal/values.yaml')
| -rw-r--r-- | kubernetes/aai/components/aai-traversal/values.yaml | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/kubernetes/aai/components/aai-traversal/values.yaml b/kubernetes/aai/components/aai-traversal/values.yaml index 38011a0c98..ad4279a543 100644 --- a/kubernetes/aai/components/aai-traversal/values.yaml +++ b/kubernetes/aai/components/aai-traversal/values.yaml @@ -59,7 +59,7 @@ global: # global defaults # Active spring profiles for the resources microservice profiles: - active: production,dmaap,aaf-auth + active: production,dmaap,aaf-auth #,keycloak # Notification event specific properties notification: @@ -168,6 +168,20 @@ aai_enpoints: # application configuration config: + # configure keycloak according to your environment. + # don't forget to add keycloak in active profiles above (global.config.profiles) + keycloak: + host: keycloak.your.domain + port: 8180 + # Specifies a set of users, credentials, roles, and groups + realm: aai-traversal + # Used by any client application for enabling fine-grained authorization for their protected resources + resource: aai-traversal-app + # If set to true, additional criteria will be added into traversal query to returns all the vertices that match + # the data-owner property with the given role to the user in keycloak + multiTenancy: + enabled: true + # Specifies timeout information such as application specific and limits timeout: # If set to true application will timeout for queries taking longer than limit |