management-service

README

Configuration

management-service is expecting to find the following top-level entries in configuration:

• management: management service configuration. See below.
• po-store: policy store configuration. See kvstore config.
• po-agent (optional): policy agent configuration. See policy config.
• plugin: plugin manager configuration. See plugin config.
• logging (optional): Logging configuration. See logging config.
• auth (optional): API authentication and authorization mechanism configuration. If this is not specified, the passthrough backend will be used (i.e. no authentication will be performed). With other backends, authorization is based on manager role. See auth config.

Management service configuration

• listen-addr (optional): the address, in the form <host>:<port> the management server will be listening on. If not specified, this defaults to localhost:8088.
• protocol (optional): the protocol that will be used. Must be either "http" or "https". Defaults to "https" if not specified.
• cert: path to the x509 certificate to be used. Must be specified if protocol is "https"
• cert-key: path to the key associated with the certificate specified in cert. Must be specified if protocol is "https"

Example

management:
  listen-addr: 0.0.0.0:8088
  protocol: https
  cert: management.crt
  cert-key: management.key
po-store:
  backend: sql
  sql:
    driver: sqlite3
    datasource: po-store.sql
po-agent:
    backend: opa
plugin:
  backend: go-plugin
  go-plugin:
    folder: ../../plugins/bin/

Documentation

Overview

Copyright 2023-2024 Contributors to the Veraison project. SPDX-License-Identifier: Apache-2.0