kuadrant-backstage-plugin/app-config.local.yaml at main · Kuadrant/kuadrant-backstage-plugin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
app:
  title: Red Hat Developer Hub
  baseUrl: http://localhost:3000

signInPage: oidc

organization:
  name: My Org

backend:
  baseUrl: http://localhost:7007
  listen:
    port: 7007
  csp:
    connect-src:
      - "'self'"
      - "http:"
      - "https:"
  cors:
    origin: http://localhost:3000
    methods: [GET, HEAD, PATCH, POST, PUT, DELETE]
    credentials: true
  database:
    client: better-sqlite3
    connection: ":memory:"

proxy:
  skipInvalidProxies: true
  endpoints: {}

lighthouse:
  baseUrl: temp

dynatrace:
  baseUrl: temp

techdocs:
  builder: external

auth:
  environment: development
  session:
    secret: local-dev-session-secret-change-in-production
    absoluteTimeoutSeconds: 604800
    cookie:
      secure: false
      sameSite: lax
      path: /
  providers:
    guest:
      dangerouslyAllowOutsideDevelopment: true
      userEntityRef: user:default/guest
    oidc:
      development:
        metadataUrl: http://localhost:5556/.well-known/openid-configuration
        clientId: backstage
        clientSecret: backstage-dev-secret
        title: OIDC
        signIn:
          resolvers:
            - resolver: emailMatchingUserEntityProfileEmail
kubernetes:
  clusterLocatorMethods:
    - type: config
      clusters:
        - name: local-cluster
          url: ${K8S_URL}
          authProvider: serviceAccount
          serviceAccountToken: ${K8S_CLUSTER_TOKEN}
          skipTLSVerify: true
permission:
  enabled: true
  rbac:
    admin:
      users:
        - name: user:default/platform-engineer
        - name: user:default/api-owner
        - name: user:default/guest
      superUsers:
        - name: user:default/platform-engineer
        - name: user:default/api-owner
        - name: user:default/guest
    policies-csv-file: ../../rbac-policy.csv
    policyFileReload: true

catalog:
  import:
    entityFilename: catalog-info.yaml
    pullRequestBranchName: backstage-integration
  rules:
    - allow:
        [
          Component,
          System,
          API,
          APIProduct,
          Group,
          User,
          Resource,
          Location,
          Template,
        ]
  locations:
    - type: file
      target: ../../catalog-entities/all.yaml