Example config

examples/oidc-escape/gateway.toml

@@ -0,0 +1,39 @@
+[shared]
+jwt_secret = "jwt_secret"
+
+# services to enable
+[grpc.services.gateway]
+commit_share_to_storage_grant = true
+commit_share_to_storage_ref = true
+
+[grpc.services.storageregistry]
+[grpc.services.storageregistry.drivers.static]
+home_provider = "/home"
+
+[grpc.services.authregistry.drivers.static.rules]
+oidcescape = "localhost:13000"
+
+[grpc.services.storageregistry.drivers.static.rules."/home"]
+address = "localhost:17000"
+[grpc.services.storageregistry.drivers.static.rules."/reva"]
+address = "localhost:18000"
+[grpc.services.storageregistry.drivers.static.rules."123e4567-e89b-12d3-a456-426655440000"]
+address = "localhost:18000"
+
+[grpc.services.authregistry]
+[grpc.services.usershareprovider]
+[grpc.services.groupprovider]
+[grpc.services.publicshareprovider]
+[grpc.services.ocmcore]
+
+[grpc.services.ocmshareprovider]
+gateway_addr = "0.0.0.0:19000"
+
+[grpc.services.ocminvitemanager]
+[grpc.services.ocmproviderauthorizer]
+
+[http.services.datagateway]
+[http.services.prometheus]
+[http.services.ocmd]
+[http.services.ocdav]
+[http.services.ocs]

examples/oidc-escape/storage-home.toml

@@ -0,0 +1,17 @@
+[grpc]
+address = "0.0.0.0:17000"
+
+[grpc.services.storageprovider]
+driver = "localhome"
+mount_path = "/home"
+mount_id = "123e4567-e89b-12d3-a456-426655440000"
+data_server_url = "http://localhost:17001/data"
+
+[grpc.services.storageprovider.drivers.localhome]
+shadow = "shadowfolder"
+
+[http]
+address = "0.0.0.0:17001"
+
+[http.services.dataprovider]
+driver = "localhome"

examples/oidc-escape/users-oidcescape.toml

@@ -0,0 +1,23 @@
+[shared]
+jwt_secret = "Pive-Fumkiu4"
+
+# This toml config file will start a reva service that:
+# - handles user metadata and user preferences
+# - serves the grpc services on port 13000
+[grpc]
+address = "0.0.0.0:13000"
+
+[grpc.services.authprovider]
+auth_manager = "oidcescape"
+[grpc.services.authprovider.auth_managers.json]
+users = "users.json"
+[grpc.services.authprovider.auth_managers.oidcescape]
+issuer = "http://iam-login-service:8080/"
+userprovidersvc = "0.0.0.0:13000"
+# The ESCAPE IAM users mapping file path
+users = "/etc/revad/iam-escape-users.json"
+
+[grpc.services.userprovider]
+driver = "json"
+[grpc.services.userprovider.drivers.json]
+users = "users.json"

examples/oidc-escape/users.json

@@ -0,0 +1,46 @@
+[
+	{
+		"id": {
+			"opaque_id": "4c510ada-c86b-4815-8820-42cdf82c3d51",
+			"idp": "reva-oidc-escape:20080"
+		},
+		"username": "einstein",
+		"secret": "relativity",
+		"mail": "[email protected]",
+		"display_name": "Albert Einstein",
+		"groups": ["sailing-lovers", "violin-haters", "physics-lovers"]
+	},
+	{
+		"id": {
+			"opaque_id": "f7fbf8c8-139b-4376-b307-cf0a8c2d0d9c",
+			"idp": "reva-oidc-escape:20080"
+		},
+		"username": "marie",
+		"secret": "radioactivity",
+		"mail": "[email protected]",
+		"display_name": "Marie Curie",
+		"groups": ["radium-lovers", "polonium-lovers", "physics-lovers"]
+	},
+	{
+		"id": {
+			"opaque_id": "932b4540-8d16-481e-8ef4-588e4b6b151c",
+			"idp": "reva-oidc-escape:20080"
+		},
+		"username": "richard",
+		"secret": "superfluidity",
+		"mail": "[email protected]",
+		"display_name": "Richard Feynman",
+		"groups": ["quantum-lovers", "philosophy-haters", "physics-lovers"]
+	},
+	{
+		"id": {
+			"opaque_id": "4029579c-6ad5-4cec-a9ce-e843f77de452",
+			"idp": "reva-oidc-escape:20080"
+		},
+		"username": "jimmie",
+		"secret": "spokenword",
+		"mail": "[email protected]",
+		"display_name": "Jimmie Rigg",
+		"groups": ["sailing-lovers", "violin-haters", "physics-lovers"]
+	}
+]