Hoppa till innehållet
Stackship-dokumentation English

ÅtkomstkontrollAdministratörerMaskinöversatt

Konfigurationsreferens

Konfigurationsnycklar i modulen rbac: sektioner, miljövariabler, typer och standardvärden.

Genererad från modulens kod när dess image byggdes — redigera inte. Varje nyckel kan sättas som miljövariabel på modulens deployment i namnrymden stackship-system; dubbla understreck skiljer nivåerna åt. En miljövariabel går före modulens medlevererade appsettings. Värden som kan vara hemligheter visas inte.

Auth

Binds till StackshipAuthOptions.

Nyckel Miljövariabel Typ Standardvärde
Auth:InternalUrl Auth__InternalUrl string ""
Auth:Module:Audience Auth__Module__Audience string
Auth:Module:ClientId Auth__Module__ClientId string ""
Auth:Module:ClientSecret Auth__Module__ClientSecret string (visas inte)
Auth:Realm Auth__Realm string ""
Auth:Stackship:Audience Auth__Stackship__Audience string
Auth:Stackship:ClientId Auth__Stackship__ClientId string ""
Auth:Stackship:ClientSecret Auth__Stackship__ClientSecret string (visas inte)
Auth:Url Auth__Url string ""

Auth:Admin

Binds till KeycloakIdentityAdminOptions.

Nyckel Miljövariabel Typ Standardvärde
Auth:Admin:Audience Auth__Admin__Audience string stackship-kubernetes-client
Auth:Admin:ClientId Auth__Admin__ClientId string ""
Auth:Admin:ClientSecret Auth__Admin__ClientSecret string (visas inte)

Auth:Admin

Binds till KeycloakAdminOptions.

Nyckel Miljövariabel Typ Standardvärde
Auth:Admin:ClientId Auth__Admin__ClientId string ""
Auth:Admin:ClientSecret Auth__Admin__ClientSecret string (visas inte)

ChangePassword

Binds till PasswordChangeOptions.

Nyckel Miljövariabel Typ Standardvärde
ChangePassword:PortalBaseUrl ChangePassword__PortalBaseUrl string http://localhost:5173
ChangePassword:ReauthWindowMinutes ChangePassword__ReauthWindowMinutes integer 5
ChangePassword:SupportEmail ChangePassword__SupportEmail string support@stackship.se

Invitations

Binds till InvitationOptions.

Nyckel Miljövariabel Typ Standardvärde
Invitations:DefaultExpiryDays Invitations__DefaultExpiryDays integer 7
Invitations:ExpirySweepIntervalMinutes Invitations__ExpirySweepIntervalMinutes integer 60
Invitations:MaxResendsPer24h Invitations__MaxResendsPer24h integer 3
Invitations:PortalBaseUrl Invitations__PortalBaseUrl string http://localhost:5173
Invitations:SupportEmail Invitations__SupportEmail string support@stackship.se

PasswordReset

Binds till PasswordResetOptions.

Nyckel Miljövariabel Typ Standardvärde
PasswordReset:ExpirySweepIntervalMinutes PasswordReset__ExpirySweepIntervalMinutes integer 15
PasswordReset:IpRateLimitPermits PasswordReset__IpRateLimitPermits integer 10
PasswordReset:IpRateLimitWindowMinutes PasswordReset__IpRateLimitWindowMinutes integer 15
PasswordReset:MaxRequestsPer24h PasswordReset__MaxRequestsPer24h integer 3
PasswordReset:PortalBaseUrl PasswordReset__PortalBaseUrl string http://localhost:5173
PasswordReset:SupportEmail PasswordReset__SupportEmail string support@stackship.se
PasswordReset:TokenLifetimeMinutes PasswordReset__TokenLifetimeMinutes integer 60

Rbac:Organizations

Binds till OrganizationsOptions.

Nyckel Miljövariabel Typ Standardvärde
Rbac:Organizations:Enabled Rbac__Organizations__Enabled boolean false
Rbac:Organizations:SweepInterval Rbac__Organizations__SweepInterval duration 00:15:00

Rbac:Reconciler

Binds till ReconcilerOptions.

Nyckel Miljövariabel Typ Standardvärde
Rbac:Reconciler:EnableDebugRoute Rbac__Reconciler__EnableDebugRoute boolean false
Rbac:Reconciler:OidcGroupsPrefix Rbac__Reconciler__OidcGroupsPrefix string ""
Rbac:Reconciler:OidcUsernamePrefix Rbac__Reconciler__OidcUsernamePrefix string oidc:
Rbac:Reconciler:ResourceGroupNamespacePrefix Rbac__Reconciler__ResourceGroupNamespacePrefix string rg-
Rbac:Reconciler:SweepInterval Rbac__Reconciler__SweepInterval duration 00:05:00

Stackship

Binds till StackshipModuleOptions.

Nyckel Miljövariabel Typ Standardvärde
Stackship:AutoUnregisterOnShutdown Stackship__AutoUnregisterOnShutdown boolean true
Stackship:BackendBaseUrl Stackship__BackendBaseUrl string ""
Stackship:BaseUrl Stackship__BaseUrl string ""
Stackship:CustomResourceDefinitions:{index}:Group Stackship__CustomResourceDefinitions__{index}__Group string
Stackship:CustomResourceDefinitions:{index}:Plural Stackship__CustomResourceDefinitions__{index}__Plural string
Stackship:CustomResourceDefinitions:{index}:ReadAction Stackship__CustomResourceDefinitions__{index}__ReadAction string
Stackship:CustomResourceDefinitions:{index}:ResourceName Stackship__CustomResourceDefinitions__{index}__ResourceName string
Stackship:CustomResourceDefinitions:{index}:StatusSource Stackship__CustomResourceDefinitions__{index}__StatusSource string
Stackship:CustomResourceDefinitions:{index}:UserManagedResource Stackship__CustomResourceDefinitions__{index}__UserManagedResource boolean
Stackship:CustomResourceDefinitions:{index}:Version Stackship__CustomResourceDefinitions__{index}__Version string
Stackship:DisplayName Stackship__DisplayName string ""
Stackship:HeartbeatInterval Stackship__HeartbeatInterval duration 00:00:30
Stackship:HeartbeatTimeout Stackship__HeartbeatTimeout duration
Stackship:HttpTimeout Stackship__HttpTimeout duration 00:00:15
Stackship:Key Stackship__Key string (visas inte)
Stackship:RegistrationRetryInterval Stackship__RegistrationRetryInterval duration 00:00:05
Stackship:UseGrpcRegistration Stackship__UseGrpcRegistration boolean false

Läses vid start

Nycklar som modulen läser direkt när den startar, utanför en options-sektion. Värdekolumnen visar vad modulens appsettings levererar.

Nyckel Miljövariabel Typ Levererat värde
SkipDatabaseMigrations SkipDatabaseMigrations

Övriga medlevererade inställningar

Nycklar som modulens appsettings sätter och som ingen options-sektion ovan täcker.

Nyckel Miljövariabel Typ Levererat värde
Compute:Ingress:Class Compute__Ingress__Class nginx
Compute:Storage:Classes:Premium Compute__Storage__Classes__Premium vsphere-block
Compute:Storage:Classes:Standard Compute__Storage__Classes__Standard vsphere-block
ConnectionStrings:Postgres ConnectionStrings__Postgres (visas inte)
Rbac:TestSeed:AllowedClientId Rbac__TestSeed__AllowedClientId
Rbac:TestSeed:Enabled Rbac__TestSeed__Enabled False