controller-server/src/main/resources/configdefinitions/athenz.def


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

# Copyright 2017 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
namespace=vespa.hosted.controller.athenz.config

# Principal header name
principalHeaderName             string  default="Athenz-Principal-Auth"

# URL to ZMS API endpoint
zmsUrl                          string

# URL to ZTS API endpoint
ztsUrl                          string

# Athenz domain for controller identity. The domain is also used for Athenz tenancy integration.
domain                          string

# Name of the internal user authentication passthru attribute
userAuthenticationPassThruAttribute  string
# TODO Remove once migrated to Okta

# Path to Athenz CA JKS trust store
athenzCaTrustStore              string

# Certificate DNS domain
certDnsDomain                   string

# Athenz service name for controller identity
service.name                    string

# Athenz service public key id
service.publicKeyId             string

# Version of Athenz service private key
service.privateKeyVersion       int

# Name of Athenz service private key secret
service.privateKeySecretName    string

# Expiry of service principal token and certificate
service.credentialsExpiryMinutes int   default=43200  # 30 days