From 91d04c64771832a0b8815ffbe1f0f9920320d94d Mon Sep 17 00:00:00 2001 From: Pamela Dragosh Date: Tue, 14 Feb 2017 19:41:00 -0500 Subject: Initial OpenECOMP policy/engine commit Change-Id: I7dbff37733b661643dd4d1caefa3d7dccc361b6e Signed-off-by: Pamela Dragosh --- packages/install/src/assembly/zip.xml | 42 ++++++++++ packages/install/src/files/base.conf | 19 +++++ packages/install/src/files/brmsgw.conf | 42 ++++++++++ packages/install/src/files/console.conf | 134 ++++++++++++++++++++++++++++++++ packages/install/src/files/mysql.conf | 5 ++ packages/install/src/files/pap.conf | 52 +++++++++++++ packages/install/src/files/paplp.conf | 12 +++ packages/install/src/files/pdp.conf | 36 +++++++++ packages/install/src/files/pdplp.conf | 12 +++ packages/install/src/files/pypdp.conf | 25 ++++++ 10 files changed, 379 insertions(+) create mode 100644 packages/install/src/assembly/zip.xml create mode 100644 packages/install/src/files/base.conf create mode 100644 packages/install/src/files/brmsgw.conf create mode 100644 packages/install/src/files/console.conf create mode 100755 packages/install/src/files/mysql.conf create mode 100644 packages/install/src/files/pap.conf create mode 100755 packages/install/src/files/paplp.conf create mode 100644 packages/install/src/files/pdp.conf create mode 100755 packages/install/src/files/pdplp.conf create mode 100644 packages/install/src/files/pypdp.conf (limited to 'packages/install/src') diff --git a/packages/install/src/assembly/zip.xml b/packages/install/src/assembly/zip.xml new file mode 100644 index 000000000..f98510c79 --- /dev/null +++ b/packages/install/src/assembly/zip.xml @@ -0,0 +1,42 @@ + + + + zipfile + + zip + + false + + + src/files + . + 755 + + + + + + org.openecomp.policy.engine:base:* + + false + + + diff --git a/packages/install/src/files/base.conf b/packages/install/src/files/base.conf new file mode 100644 index 000000000..92c6d9015 --- /dev/null +++ b/packages/install/src/files/base.conf @@ -0,0 +1,19 @@ +JAVA_HOME=/usr/lib/jvm/java-8-oracle +POLICY_HOME=/opt/app/policy +KEYSTORE_PASSWD=PolicyR0ck$ + +JDBC_DRIVER=com.mysql.jdbc.Driver +JDBC_URL=jdbc:mysql://localhost:3306/xacml +JDBC_LOG_URL=jdbc:mysql://localhost:3306/log +JDBC_USER=policy_user +JDBC_PASSWORD= + +site_name=site_1 +fp_monitor_interval=30 +failed_counter_threshold=3 +test_trans_interval=20 +write_fpc_interval=5 +max_fpc_update_interval=60 +test_via_jmx=false + +ENVIRONMENT=TEST diff --git a/packages/install/src/files/brmsgw.conf b/packages/install/src/files/brmsgw.conf new file mode 100644 index 000000000..9f2252ca4 --- /dev/null +++ b/packages/install/src/files/brmsgw.conf @@ -0,0 +1,42 @@ +# BRMSpep component installation configuration parameters +BRMSGW_JMX_PORT=9989 + +COMPONENT_X_MX_MB=1024 +COMPONENT_X_MS_MB=1024 + +REST_PAP_URL=https://${{FQDN}}:9091/pap/ +REST_PDP_ID=https://${{FQDN}}:8081/pdp/ + +PDP_HTTP_USER_ID=testpdp +PDP_HTTP_PASSWORD=alpha123 +PDP_PAP_PDP_HTTP_USER_ID=testpap +PDP_PAP_PDP_HTTP_PASSWORD=alpha123 + +M2_HOME=/usr/share/maven +snapshotRepositoryID=snapshots +snapshotRepositoryName=Snapshots +snapshotRepositoryURL=http://nexus:8081/nexus/content/repositories/snapshots +releaseRepositoryID=releases +releaseRepositoryName=Releases +releaseRepositoryURL=http://nexus:8081/nexus/content/repositories/releases +repositoryUsername=test +repositoryPassword=test +UEB_URL=vm1.mr.simpledemo.openecomp.org +UEB_TOPIC=CLOSEDLOOP-DCAE-SAMPLE +UEB_API_KEY= +UEB_API_SECRET= + +groupID=org.openecomp.policy-engine +artifactID=drlPDPGroup +VFW_GROUP_ID=org.openecomp.policy-engine.drools.vFW +VFW_ARTIFACT_ID=policy-vFW-rules +VDNS_GROUP_ID=org.openecomp.policy-engine.drools.vDNS +VDNS_ARTIFACT_ID=policy-vDNS-rules + +# the java property is RESOURCE_NAME (uppercase), but the conf parameter is lowercase +resource_name=brmsgw_1 +node_type=brms_gateway + +CLIENT_ID=PyPDPServer +CLIENT_KEY=test +ENVIRONMENT=DEVL diff --git a/packages/install/src/files/console.conf b/packages/install/src/files/console.conf new file mode 100644 index 000000000..39435fe26 --- /dev/null +++ b/packages/install/src/files/console.conf @@ -0,0 +1,134 @@ +# configs component installation configuration parameters + +# tomcat specific parameters + +TOMCAT_JMX_PORT=9993 +TOMCAT_SHUTDOWN_PORT=8090 +SSL_HTTP_CONNECTOR_PORT=8443 +SSL_HTTP_CONNECTOR_REDIRECT_PORT=8443 +SSL_AJP_CONNECTOR_PORT=8383 +SSL_AJP_CONNECTOR_REDIRECT_PORT=8443 + +TOMCAT_X_MS_MB=2048 +TOMCAT_X_MX_MB=2048 + +# ------------------ console properties --------------------------- + +# +# Authorization Policy + +ROOT_POLICIES=admin +ADMIN_FILE=Policy-Admin.xml + + +# Set your domain here: + +REST_ADMIN_DOMAIN=com + +# +# Location where the GIT repository is located +# +REST_ADMIN_REPOSITORY=repository + +# +# Location where all the user workspaces are located. +# +REST_ADMIN_WORKSPACE=${{POLICY_HOME}}/servers/console/bin/workspace +# +# These can be set so the Admin Console knows who is logged on. Ideally, you can run the console in a J2EE +# container and setup authentication as you please. Setting HttpSession attribute values will override these +# values set in the properties files. +# +# ((HttpServletRequest) request).getSession().setAttribute("xacml.rest.admin.user.name", "Homer"); +# +# The default policy: Policy-Admin.xml is extremely simple. +# +# You can test authorization within the Admin Console by changing the user id. +# There are 3 supported user ids: +# guest - Read only access +# editor - Read/Write access +# admin - Read/Write/Admin access +# +# An empty or null value for xacml.rest.admin.user.id results in no access to the application at all. +# +# This is for development/demonstration purposes only. A production environment should provide authentication which is +# outside the scope of this application. This application can be used to develop a XACML policy for user authorization +# within this application. +# + +REST_ADMIN_USER_NAME=Administrator +REST_ADMIN_USER_ID=super-admin + +# +# +# Property to declare the max time frame for logs. +# +LOG_TIMEFRAME=30 + +# Property to declare the number of visible rows for users in MicroService Policy +COLUMN_COUNT=3 + +# Dashboard refresh rate in miliseconds +REFRESH_RATE=40000 + +# +# URL location for the PAP servlet. +# + + +REST_PAP_URL=https://${{FQDN}}:9091/pap/ + +# +# Config/Action Properties location. +# + +REST_CONFIG_HOME=${{POLICY_HOME}}/servers/pap/webapps/Config/ +REST_ACTION_HOME=${{POLICY_HOME}}/servers/pap/webapps/Action/ +REST_CONFIG_URL=https://${{FQDN}}:9091/ +REST_CONFIG_WEBAPPS=${{POLICY_HOME}}/servers/pap/webapps/ + +# PAP account information +CONSOLE_PAP_HTTP_USER_ID=testpap +CONSOLE_PAP_HTTP_PASSWORD=alpha123 + + +node_type=pap_admin +resource_name=console_1 + +# The (optional) period of time in seconds between executions of the integrity audit. +# Value < 0 : Audit does not run (default value if property is not present = -1) +# Value = 0 : Audit runs continuously +# Value > 0 : The period of time in seconds between execution of the audit on a particular node +integrity_audit_period_seconds=-1 + +#Automatic Policy Distribution +automatic_push=false + +#Diff of policies for Firewall feature +FW_GETURL=https://localhost.com/v0/configs/firewall/pan/ +FW_AUTHOURL=https://localhost +FW_PROXY= +FW_PORT= + +#SMTP Server Details for Java Mail +ecomp_smtp_host= +ecomp_smtp_port= +ecomp_smtp_userName=root@localhost +ecomp_smtp_password=password123 +ecomp_application_name=Dev + +#-----------------------ECOMP-PORTAL-Properties---------------------- + +ECOMP_REDIRECT_URL=https://localhost/ecompui/process_csp +ECOMP_REST_URL=https://localhost:8443/ecompui/auxapi +ECOMP_UEB_URL_LIST=localhost.com,localhost1.com +ECOMP_PORTAL_INBOX_NAME=ECOMP-PORTAL-INBOX-TEST +ECOMP_UEB_APP_KEY=FZpTlJbdRIibgSmg +ECOMP_UEB_APP_SECRET=QMyKdILRBwj1c76UQONjSYOt +ECOMP_UEB_APP_MAILBOX_NAME=ECOMP-PORTAL-OUTBOX-45601 +APP_DISPLAY_NAME=POLICY IST +ECOMP_SHARED_CONTEXT_REST_URL=https://localhost:8443/ecompui/context + +#Add the Rest PAP url and pap auth password on adding delimiter @Auth@ *****Check the below assigned dummy example****** + +REST_PAPURL_WITH_AUTH_PASSWORD=http://localhost:8070/pap/@Auth@dGVzdHBhcDphbHBoYTEyMw== diff --git a/packages/install/src/files/mysql.conf b/packages/install/src/files/mysql.conf new file mode 100755 index 000000000..28b9e3ca3 --- /dev/null +++ b/packages/install/src/files/mysql.conf @@ -0,0 +1,5 @@ +# mysql scripts component installation configuration parameters + +# Path to mysql bin +MYSQL_BIN=/usr/local/mysql/bin + diff --git a/packages/install/src/files/pap.conf b/packages/install/src/files/pap.conf new file mode 100644 index 000000000..80eb303a8 --- /dev/null +++ b/packages/install/src/files/pap.conf @@ -0,0 +1,52 @@ +# pap component installation configuration parameters + +# tomcat specific parameters + +TOMCAT_JMX_PORT=9990 +TOMCAT_SHUTDOWN_PORT=9405 +SSL_HTTP_CONNECTOR_PORT=9091 +SSL_AJP_CONNECTOR_PORT=8380 +SSL_AJP_CONNECTOR_REDIRECT_PORT=8443 + +TOMCAT_X_MS_MB=1024 +TOMCAT_X_MX_MB=1024 + +# pap properties + +PAP_PDPS=${{POLICY_HOME}}/servers/pap/bin/pdps +PAP_URL=https://${{FQDN}}:9091/pap/ + +PAP_INITIATE_PDP=true +PAP_HEARTBEAT_INTERVAL=10000 +PAP_HEARTBEAT_TIMEOUT=10000 + +REST_ADMIN_DOMAIN=com +REST_ADMIN_REPOSITORY=repository +REST_ADMIN_WORKSPACE=workspace + +# PDP related properties + +PAP_PDP_URL=https://${{FQDN}}:8081/pdp/ +PAP_PDP_HTTP_USER_ID=testpdp +PAP_PDP_HTTP_PASSWORD=alpha123 + +PAP_HTTP_USER_ID=testpap +PAP_HTTP_PASSWORD=alpha123 + +#new values added 10-21-2015 +PROP_PAP_TRANS_WAIT=500000 +PROP_PAP_TRANS_TIMEOUT=5000 +PROP_PAP_AUDIT_TIMEOUT=300000 +PROP_PAP_RUN_AUDIT_FLAG=false +PROP_PAP_AUDIT_FLAG=false + + +node_type=pap +resource_name=pap_1 +dependency_groups=console_1;paplp_1 + +# The (optional) period of time in seconds between executions of the integrity audit. +# Value < 0 : Audit does not run (default value if property is not present = -1) +# Value = 0 : Audit runs continuously +# Value > 0 : The period of time in seconds between execution of the audit on a particular node +integrity_audit_period_seconds=-1 diff --git a/packages/install/src/files/paplp.conf b/packages/install/src/files/paplp.conf new file mode 100755 index 000000000..f5a6d096b --- /dev/null +++ b/packages/install/src/files/paplp.conf @@ -0,0 +1,12 @@ +# JVM specific parameters +LOGPARSER_JMX_PORT=9996 +LOGPARSER_X_MS_MB=1024 +LOGPARSER_X_MX_MB=1024 + +SERVER=https://${{FQDN}}:9091/pap/ +LOGPATH=${{POLICY_HOME}}/servers/pap/logs/pap-rest.log +PARSERLOGPATH=IntegrityMonitor.log + +node_type=logparser +# the java property is RESOURCE_NAME (uppercase), but the conf parameter is lowercase +resource_name=paplp_1 diff --git a/packages/install/src/files/pdp.conf b/packages/install/src/files/pdp.conf new file mode 100644 index 000000000..1cfc62df8 --- /dev/null +++ b/packages/install/src/files/pdp.conf @@ -0,0 +1,36 @@ +# pdp component installation configuration parameters + +# tomcat specific parameters + +TOMCAT_JMX_PORT=9991 +TOMCAT_SHUTDOWN_PORT=8087 +SSL_HTTP_CONNECTOR_PORT=8081 +SSL_AJP_CONNECTOR_PORT=8381 +SSL_AJP_CONNECTOR_REDIRECT_PORT=8443 + +TOMCAT_X_MS_MB=1024 +TOMCAT_X_MX_MB=1024 + +# pdp properties + +ATT_UEB_CLUSTER=localhost.com,localhost1.com + +REST_PAP_URL=https://${{FQDN}}:9091/pap/ +REST_PDP_ID=https://${{FQDN}}:8081/pdp/ +REST_PDP_CONFIG=${{POLICY_HOME}}/servers/pdp/bin/config +REST_PDP_WEBAPPS=${{POLICY_HOME}}/servers/pdp/webapps +REST_PDP_REGISTER=true +REST_PDP_REGISTER_SLEEP=15 +REST_PDP_REGISTER_RETRIES=-1 +REST_PDP_MAXCONTENT=999999999 + +# PDP related properties +PDP_HTTP_USER_ID=testpdp +PDP_HTTP_PASSWORD=alpha123 +PDP_PAP_PDP_HTTP_USER_ID=testpap +PDP_PAP_PDP_HTTP_PASSWORD=alpha123 + +node_type=pdp_xacml +resource_name=pdp_1 +dependency_groups=pdplp_1;pypdp_1;brmsgw_1 + diff --git a/packages/install/src/files/pdplp.conf b/packages/install/src/files/pdplp.conf new file mode 100755 index 000000000..750537819 --- /dev/null +++ b/packages/install/src/files/pdplp.conf @@ -0,0 +1,12 @@ +# JVM specific parameters +LOGPARSER_JMX_PORT=9997 +LOGPARSER_X_MS_MB=1024 +LOGPARSER_X_MX_MB=1024 + +SERVER=https://${{FQDN}}:8081/pdp/ +LOGPATH=${{POLICY_HOME}}/servers/pdp/logs/pdp-rest.log +PARSERLOGPATH=IntegrityMonitor.log + +node_type=logparser +# the java property is RESOURCE_NAME (uppercase), but the conf parameter is lowercase +resource_name=pdplp_1 diff --git a/packages/install/src/files/pypdp.conf b/packages/install/src/files/pypdp.conf new file mode 100644 index 000000000..2117ff8ba --- /dev/null +++ b/packages/install/src/files/pypdp.conf @@ -0,0 +1,25 @@ +# pypdp component installation configuration parameters + +# tomcat specific parameters + +TOMCAT_JMX_PORT=9994 +TOMCAT_SHUTDOWN_PORT=8405 +SSL_HTTP_CONNECTOR_PORT=8480 +SSL_AJP_CONNECTOR_PORT=8384 +SSL_AJP_CONNECTOR_REDIRECT_PORT=8443 + +TOMCAT_X_MS_MB=1024 +TOMCAT_X_MX_MB=1024 + +# pypdp parameters + +PDP_URL=https://${{FQDN}}:8081/pdp/,testpdp,alpha123 +PAP_URL=https://${{FQDN}}:9091/pap/ +PYPDP_ID=testrest +PYPDP_PASSWORD=alpha123 + +node_type=pypdp +# the java property is RESOURCE_NAME (uppercase), but the conf parameter is lowercase +resource_name=pypdp_1 + +CLIENT_FILE=client.properties -- cgit 1.2.3-korg