...
| draw.io Diagram | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
References:
- identity-provider e.g. KeyCloak
- oauth-provider
Environment Variables
sdnc-image
Overall page is here: https://wiki.onap.org/display/DW/startODL.sh+-+Important+Environment+variables+and+their+description
| env var | default value | description |
|---|---|---|
| ENABLE_OAUTH | false | enable oauth for login (oauth providers have to be configured in etc/oauth-provider.config.json in sdnc container |
| ENABLE_ODLUX_RBAC | false | enable role based access control information for configurationApp |
| OAUTH_TOKEN_SECRET | secret | key to sign the token |
| OAUTH_TOKEN_ISSUER | ONAP SDNC | |
| OAUTH_SUPPORT_ODLUSERS | true | login interface enabled for internal odl configured users |
| OAUTH_ODLUX_REDIRECT_URI | /odlux/index.html#/oauth?token= | OAuth redirect will be responded |
| OAUTH_HOST_URL | null => autodetected | important for reverse proxy use case |
| ODL_ADMIN_PASSWORD | none | ODL admin user password. Mandatory parameter. If not specified, container terminates |
| ODL_ADMIN_USERNAME | ""->admin | ODL admin user name |
| ODL_REMOVEIDMDB | true | if true the odl-sli default password setting are removed and new ODL_ADMIN_USERNAME/ODL_ADMIN_PASSWORD is configured. If set to false, ODL_ADMIN_USERNAME needs to be "admin" and ODL_ADMIN_PASSWORD needs to be "Kp8bJ4SXszM0WXlhak3eHlcse2gAw84vaoGGmJvUy2U" (Unsecure, used internally for integration test) |
sdnc-web-image
| env var | default value | description |
|---|---|---|
| WEBPROTOCOL | HTTP | protocol for local webserver (HTTP=>http, HTTPS=>https) |
| WEBPORT | 8080 | port to listen for local webserver |
| SDNRPROTOCOL | HTTP | protocol for remote opendaylight webserver (HTTP=>http, HTTPS=>https) |
| SDNRHOST | 172.18.0.3 | ip/fqdn for remote opendaylight webserver |
| SDNRPORT | 8181 | port for remote opendaylight webserver |
| TRPCEURL | "" | url for remote transportpce webserver or empty (not set) for off e.g. http://10.20.0.7:8181 |
| TOPOURL | "" | url for remote topology api webserver or empty (not set) for off e.g http://10.20.0.4:3001 |
| TILEURL | "" | url for remote tile server or empty (not set) for off e.g. http://tiles.openstreetmap.org |
| DNS_RESOLVER | 1.1.1.1 | DNS for resolving TILEURL, not important if TILEURL is empty |
| ENABLE_OAUTH | false | enable oauth for login (oauth providers have to be configured in etc/oauth-provider.config.json in sdnc container |
| ENABLE_POLICY | false | enable policy restricted access for configurationApp |
...