2eb6852d34
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly. - Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps. - Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges. - Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges. - Set up project file for the test project with necessary dependencies and configurations. - Include JSON fixture files for testing purposes.
52 lines
1.7 KiB
YAML
52 lines
1.7 KiB
YAML
# Notify WebService configuration — air-gapped bootstrap profile
|
|
#
|
|
# This template ships inside the Bootstrap Pack so operators can stage
|
|
# deterministic notifier settings without reaching external services. The
|
|
# values align with the docker-compose.airgap.yaml profile and the defaults
|
|
# produced by the Offline Kit builder. Update the connection string and
|
|
# Authority endpoints if your environment uses different hosts.
|
|
|
|
storage:
|
|
driver: mongo
|
|
connectionString: "mongodb://stellaops:airgap-password@mongo:27017"
|
|
database: "stellaops_notify_airgap"
|
|
commandTimeoutSeconds: 45
|
|
|
|
authority:
|
|
enabled: true
|
|
issuer: "https://authority.airgap.local"
|
|
metadataAddress: "https://authority.airgap.local/.well-known/openid-configuration"
|
|
requireHttpsMetadata: true
|
|
allowAnonymousFallback: false
|
|
backchannelTimeoutSeconds: 30
|
|
tokenClockSkewSeconds: 60
|
|
audiences:
|
|
- notify
|
|
viewerScope: notify.viewer
|
|
operatorScope: notify.operator
|
|
adminScope: notify.admin
|
|
|
|
api:
|
|
basePath: "/api/v1/notify"
|
|
internalBasePath: "/internal/notify"
|
|
tenantHeader: "X-StellaOps-Tenant"
|
|
|
|
plugins:
|
|
baseDirectory: "/opt/stellaops"
|
|
directory: "plugins/notify"
|
|
searchPatterns:
|
|
- "StellaOps.Notify.Connectors.*.dll"
|
|
orderedPlugins:
|
|
- StellaOps.Notify.Connectors.Email
|
|
- StellaOps.Notify.Connectors.Webhook
|
|
|
|
telemetry:
|
|
enableRequestLogging: true
|
|
minimumLogLevel: Information
|
|
|
|
# In sealed/air-gapped mode, outbound connectors are constrained by the
|
|
# shared EgressPolicy facade. Channels that point to loopback services (SMTP
|
|
# relay, syslog forwarder, file sink) are permitted; external webhooks are
|
|
# denied until the host is unsealed or allow-listed. Review
|
|
# docs/modules/notify/bootstrap-pack.md for the full bootstrap workflow.
|