Skip to content

Commit 6579af9

Browse files
committed
updates based on SME feedback
1 parent 02d736e commit 6579af9

File tree

4 files changed

+33
-36
lines changed

4 files changed

+33
-36
lines changed

downstream/modules/platform/ref-eda-controller-variables.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -290,19 +290,19 @@ eda_extra_settings:
290290
| Optional
291291
| `63072000`
292292

293-
|
293+
| `nginx_tls_protocols`
294294
| `eda_nginx_https_protocols`
295295
| Protocols that {EDAName} supports when handling HTTPS traffic.
296296
| Optional
297-
| `[TLSv1.2, TLSv1.3]`
297+
| RPM = `[TLSv1.2]`. Container = `[TLSv1.2, TLSv1.3]`.
298298

299299
|
300300
| `eda_pg_socket`
301301
| UNIX socket used by {EDAName} to connect to the PostgreSQL database.
302302
| Optional
303303
|
304304

305-
|
305+
| `redis_disable_tls`
306306
| `eda_redis_disable_tls`
307307
| Controls whether TLS is enabled or disabled for {EDAName} Redis. Set this variable to true to disable TLS.
308308
| Optional

downstream/modules/platform/ref-gateway-variables.adoc

Lines changed: 26 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@
2828
|
2929
| Denote whether the cache cert sources are local to the installation program (`false`) or on the remote component server (`true`).
3030
| Optional
31-
| `false`
31+
| The value defined in `automationgateway_tls_files_remote` which defaults to `false`.
3232

3333
| `automationgateway_client_regen_cert`
3434
|
@@ -42,12 +42,6 @@
4242
| Optional
4343
| `50051`
4444

45-
| `automationgateway_debug`
46-
|
47-
| Controls whether debug mode is enabled or disabled for {Gateway}. Set to `true` to enable debug mode for {Gateway}.
48-
| Optional
49-
| `false`
50-
5145
| `automationgateway_disable_hsts`
5246
| `gateway_nginx_disable_hsts`
5347
| Controls whether HTTP Strict Transport Security (HSTS) is enabled or disabled for {Gateway}. Set this variable to `true` to disable HSTS.
@@ -58,13 +52,13 @@
5852
| `gateway_nginx_disable_https`
5953
| Controls whether HTTPS is enabled or disabled for {Gateway}. Set this variable to `true` to disable HTTPS.
6054
| Optional
61-
| `false`
55+
| RPM = The value defined in `disable_https` which defaults to `false`. Container = `false`.
6256

6357
| `automationgateway_firewalld_zone`
6458
| `gateway_proxy_firewall_zone`
6559
| The firewall zone where {Gateway} related firewall rules are applied. This controls which networks can access {Gateway} based on the zone's trust level.
6660
| Optional
67-
| RPM = no default set. Container = 'public'
61+
| RPM = no default set. Container = 'public'.
6862

6963
| `automationgateway_grpc_auth_service_timeout`
7064
| `gateway_grpc_auth_service_timeout`
@@ -106,7 +100,8 @@
106100
|
107101
| Denote whether the web cert sources are local to the installation program (`false`) or on the remote component server (`true`).
108102
| Optional
109-
| `false`
103+
| The value defined in `automationgateway_tls_files_remote` which defaults to `false`.
104+
110105

111106
| `automationgateway_pg_cert_auth`
112107
| `gateway_pg_cert_auth`
@@ -118,7 +113,7 @@
118113
| `gateway_pg_database`
119114
| Name of the PostgreSQL database used by {Gateway}.
120115
| Optional
121-
| `gateway`
116+
| RPM = `automationgateway`. Container = `gateway`.
122117

123118
| `automationgateway_pg_host`
124119
| `gateway_pg_host`
@@ -166,7 +161,7 @@
166161
|
167162
| Denote whether the PostgreSQL client cert sources are local to the installation program (`false`) or on the remote component server (`true`).
168163
| Optional
169-
| `false`
164+
| The value defined in `automationgateway_tls_files_remote` which defaults to `false`.
170165

171166
| `automationgateway_redis_host`
172167
| `gateway_redis_host`
@@ -220,7 +215,7 @@
220215
| `envoy_disable_https`
221216
| Controls whether or not HTTPS is disabled when accessing the platform UI. Set to `true` to disable HTTPS (HTTP is used instead).
222217
| Optional
223-
| `false`
218+
| RPM = The value defined in `disable_https` which defaults to `false`. Container = `false`.
224219

225220
| `automationgatewayproxy_http_port`
226221
| `envoy_http_port`
@@ -234,6 +229,24 @@
234229
| Optional
235230
| `443`
236231

232+
| `nginx_tls_protocols`
233+
| `gateway_nginx_https_protocols`
234+
| Protocols that {Gateway} will support when handling HTTPS traffic.
235+
| Optional
236+
| RPM = `[TLSv1.2]`. Container = `[TLSv1.2, TLSv1.3]`.
237+
238+
| `redis_disable_tls`
239+
| `gateway_redis_disable_tls`
240+
| Controls whether TLS is enabled or disabled for {Gateway} Redis. Set this variable to `true` to disable TLS.
241+
| Optional
242+
| `false`
243+
244+
| `redis_port`
245+
| `gateway_redis_port`
246+
| Port number for the Redis host for {Gateway}.
247+
| Optional
248+
| `6379`
249+
237250
|
238251
| `gateway_extra_settings`
239252
a| Defines additional settings for use by {Gateway} during installation.
@@ -259,24 +272,6 @@ gateway_extra_settings:
259272
| Optional
260273
| `63072000`
261274

262-
|
263-
| `gateway_nginx_https_protocols`
264-
| Protocols that {Gateway} will support when handling HTTPS traffic.
265-
| Optional
266-
| `[TLSv1.2, TLSv1.3]`
267-
268-
|
269-
| `gateway_redis_disable_tls`
270-
| Controls whether TLS is enabled or disabled for {Gateway} Redis. Set this variable to `true` to disable TLS.
271-
| Optional
272-
| `false`
273-
274-
| `automationgateway_redis_port`
275-
| `gateway_redis_port`
276-
| Port number for the Redis host for {Gateway}.
277-
| Optional
278-
| `6379`
279-
280275
|
281276
| `gateway_redis_tls_cert`
282277
| Path to the {Gateway} Redis certificate file.

downstream/modules/platform/ref-general-inventory-variables.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,8 @@ Default = `public`
5959

6060
Redis clusters cannot use hostnames or IPv6 addresses. When defining hosts in the `[redis]` group, use this variable to identify the IPv4 address if the default is not what you want.
6161

62+
| `redis_disable_mtls` | | Controls whether mTLS is enabled or disabled for Redis. Set this variable to `true` to disable mTLS.
63+
6264
| `redis_firewalld_zone` | `redis_firewall_zone` | The firewall zone where Redis related firewall rules are applied. This controls which networks can access Redis based on the zone's trust level.
6365

6466
Default = `public`

downstream/modules/platform/ref-hub-variables.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -354,11 +354,11 @@ For more information about the list of parameters, see link:https://django-stora
354354
| Optional
355355
| `8444`
356356

357-
|
357+
| `nginx_tls_protocols`
358358
| `hub_nginx_https_protocols`
359359
| Protocols that {HubName} will support when handling HTTPS traffic.
360360
| Optional
361-
| `[TLSv1.2, TLSv1.3]`
361+
| RPM = `[TLSv1.2]`. Container = `[TLSv1.2, TLSv1.3]`.
362362

363363
|
364364
| `hub_pg_socket`

0 commit comments

Comments
 (0)