oud.broker.broker-server.0.8.0.source-code.reference.conf Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of broker-server Show documentation

Service to enable end-to-end Kerberos security and Cloud IAM integration for Hadoop workloads on Google Cloud Platform (GCP).

There is a newer version: 0.10.5

Show newest version

# Copyright 2020 Google LLC
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# http://www.apache.org/licenses/LICENSE-2.0
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Default values for some of the broker server settings

server {
  host = "0.0.0.0"
  port = 5000
  tls {
    enabled = true
  }
}

sessions {
  local-cache-time = 30
  maximum-lifetime = 604800000
  renew-period = 86400000
}

proxy-users = []

scopes {
  whitelist = ["https://www.googleapis.com/auth/devstorage.read_write"]
}

provider {
  backend = "com.google.cloud.broker.apps.brokerserver.accesstokens.providers.HybridProvider"
  access-tokens {
    local-cache-time = 30
    remote-cache-time = 60
  }

  # Specific providers' settings
  hybrid {
    user-provider = "com.google.cloud.broker.apps.brokerserver.accesstokens.providers.RefreshTokenProvider"
  }
  json-file-credentials {
    base-dir = ""
  }
}

user-mapping {
  mapper = "com.google.cloud.broker.usermapping.KerberosUserMapper"
}

remote-cache {
  backend = "com.google.cloud.broker.caching.remote.RedisCache"

  # Specific backends' settings
  redis {
    host = "localhost"
    port = 6379
    db = 0
  }
}

authentication {
  backend = "com.google.cloud.broker.authentication.backends.SpnegoAuthenticator"
}

logging {
  level = "INFO"
}

database {
  backend = "com.google.cloud.broker.database.backends.CloudDatastoreBackend"
}

encryption {
  backend = "com.google.cloud.broker.encryption.backends.CloudKMSBackend"
}