822e3b6037
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced a sample BOM index JSON file for impact index testing. - Created unit tests for the impact index fixture to ensure proper loading of sample images. - Implemented the FilesystemPackRunArtifactUploader class to handle artifact uploads to the local filesystem. - Added comprehensive tests for the FilesystemPackRunArtifactUploader, covering file copying, missing files, and expression outputs.
42 lines
1.9 KiB
Plaintext
42 lines
1.9 KiB
Plaintext
# Substitutions for docker-compose.prod.yaml
|
|
# ⚠️ Replace all placeholder secrets with values sourced from your secret manager.
|
|
MONGO_INITDB_ROOT_USERNAME=stellaops-prod
|
|
MONGO_INITDB_ROOT_PASSWORD=REPLACE_WITH_STRONG_PASSWORD
|
|
MINIO_ROOT_USER=stellaops-prod
|
|
MINIO_ROOT_PASSWORD=REPLACE_WITH_STRONG_PASSWORD
|
|
# Expose the MinIO console only to trusted operator networks.
|
|
MINIO_CONSOLE_PORT=39001
|
|
RUSTFS_HTTP_PORT=8080
|
|
AUTHORITY_ISSUER=https://authority.prod.stella-ops.org
|
|
AUTHORITY_PORT=8440
|
|
SIGNER_POE_INTROSPECT_URL=https://licensing.prod.stella-ops.org/introspect
|
|
SIGNER_PORT=8441
|
|
ATTESTOR_PORT=8442
|
|
# Secrets for Issuer Directory are provided via issuer-directory.mongo.env (see etc/secrets/issuer-directory.mongo.secret.example).
|
|
ISSUER_DIRECTORY_PORT=8447
|
|
ISSUER_DIRECTORY_MONGO_CONNECTION_STRING=mongodb://${MONGO_INITDB_ROOT_USERNAME}:${MONGO_INITDB_ROOT_PASSWORD}@mongo:27017
|
|
ISSUER_DIRECTORY_SEED_CSAF=true
|
|
CONCELIER_PORT=8445
|
|
SCANNER_WEB_PORT=8444
|
|
UI_PORT=8443
|
|
NATS_CLIENT_PORT=4222
|
|
SCANNER_QUEUE_BROKER=nats://nats:4222
|
|
# `true` enables signed scanner events for Notify ingestion.
|
|
SCANNER_EVENTS_ENABLED=true
|
|
SCANNER_EVENTS_DRIVER=redis
|
|
# Leave SCANNER_EVENTS_DSN empty to inherit the Redis queue DSN when SCANNER_QUEUE_BROKER uses redis://.
|
|
SCANNER_EVENTS_DSN=
|
|
SCANNER_EVENTS_STREAM=stella.events
|
|
SCANNER_EVENTS_PUBLISH_TIMEOUT_SECONDS=5
|
|
SCANNER_EVENTS_MAX_STREAM_LENGTH=10000
|
|
SCANNER_SURFACE_FS_ENDPOINT=https://surfacefs.prod.stella-ops.org/api/v1
|
|
SCANNER_SURFACE_CACHE_ROOT=/var/lib/stellaops/surface
|
|
SCANNER_SURFACE_SECRETS_PROVIDER=kubernetes
|
|
SCANNER_SURFACE_SECRETS_ROOT=stellaops/scanner
|
|
SCHEDULER_QUEUE_KIND=Nats
|
|
SCHEDULER_QUEUE_NATS_URL=nats://nats:4222
|
|
SCHEDULER_STORAGE_DATABASE=stellaops_scheduler
|
|
SCHEDULER_SCANNER_BASEADDRESS=http://scanner-web:8444
|
|
# External reverse proxy (Traefik, Envoy, etc.) that terminates TLS.
|
|
FRONTDOOR_NETWORK=stellaops_frontdoor
|