wwweww
659168fe32
- Implemented authz-adapter deployment and service for Envoy gRPC authorization. - Created PowerShell script to generate JWK for JWT authentication. - Documented the integration of ext_authz with user-rpc.ValidateToken in ENVOY_EXT_AUTHZ_ADAPTER.md. - Added comprehensive Envoy Gateway configuration guide with JWT authentication and access control in ENVOY_GATEWAY_GUIDE.md.
33 lines
703 B
YAML
33 lines
703 B
YAML
Name: pb.rpc
|
|
ListenOn: 0.0.0.0:9001
|
|
|
|
Prometheus:
|
|
Host: 0.0.0.0
|
|
Port: 4001
|
|
Path: /metrics
|
|
|
|
DataSource: "${DB_URI}?sslmode=disable"
|
|
|
|
SnowflakeRpcConf:
|
|
Target: k8s://juwan/snowflake-svc:8080
|
|
|
|
DB:
|
|
Master: "postgresql://${PD_USERNAME}:${DB_PASSWORD}@user-db-rw.juwan:${DB_PORT}/${DB_NAME}?sslmode=disable"
|
|
Slave: "postgresql://${PD_USERNAME}:${DB_PASSWORD}@user-db-ro.juwan:${DB_PORT}/${DB_NAME}?sslmode=disable"
|
|
|
|
CacheConf:
|
|
- Host: "${REDIS_M_HOST}"
|
|
Type: node
|
|
Pass: "${REDIS_PASSWORD}"
|
|
User: "default"
|
|
- Host: "${REDIS_S_HOST}"
|
|
Type: node
|
|
Pass: "${REDIS_PASSWORD}"
|
|
User: "default"
|
|
|
|
Jwt:
|
|
SecretKey: "${JWT_SECRET_KEY}"
|
|
Issuer: "juwan-user-rpc"
|
|
|
|
Log:
|
|
Level: info |