quay/conf/jwtproxy_conf.yaml.jnj

jwtproxy:
  signer_proxy:
    enabled: true
    listen_addr: :8080
    ca_key_file: /conf/mitm.key
    ca_crt_file: /conf/mitm.cert

    signer:
      issuer: quay
      expiration_time: 5m
      max_skew: 1m
      private_key:
        type: preshared
        options:
          key_id: {{ key_id }}
          private_key_path: /conf/quay.pem
  verifier_proxies:
  - enabled: true
    listen_addr: unix:/tmp/jwtproxy_secscan.sock
    verifier:
      upstream: unix:/tmp/gunicorn_secscan.sock
      audience: {{ audience }}
      key_server:
        type: keyregistry
        options:
          issuer: {{ security_issuer }}
          registry: {{ registry }}
Add jwtproxy and configure verifier for `/secscan/notify` 2016-04-18 16:42:17 +00:00			`jwtproxy:`
			`signer_proxy:`
Authenticate in the other direction with jwtproxy 2016-04-21 20:27:00 +00:00			`enabled: true`
			`listen_addr: :8080`
Generate private key on startup 2016-04-27 18:39:01 +00:00			`ca_key_file: /conf/mitm.key`
			`ca_crt_file: /conf/mitm.cert`
Add mitm certs to jwtproxy 2016-04-23 01:27:47 +00:00
Authenticate in the other direction with jwtproxy 2016-04-21 20:27:00 +00:00			`signer:`
			`issuer: quay`
			`expiration_time: 5m`
			`max_skew: 1m`
			`private_key:`
Generate preshared key on boot 2016-04-27 19:37:48 +00:00			`type: preshared`
Authenticate in the other direction with jwtproxy 2016-04-21 20:27:00 +00:00			`options:`
Generate preshared key on boot 2016-04-27 19:37:48 +00:00			`key_id: {{ key_id }}`
Split secscan endpoints into a new process 2016-05-02 15:38:00 +00:00			`private_key_path: /conf/quay.pem`
Use jwtproxy binary from github 2016-04-28 21:20:32 +00:00			`verifier_proxies:`
			`- enabled: true`
Configure jwtproxy from stack/conf yaml 2016-04-21 16:40:16 +00:00			`listen_addr: unix:/tmp/jwtproxy_secscan.sock`
Add jwtproxy and configure verifier for `/secscan/notify` 2016-04-18 16:42:17 +00:00			`verifier:`
Split secscan endpoints into a new process 2016-05-02 15:38:00 +00:00			`upstream: unix:/tmp/gunicorn_secscan.sock`
Configure jwtproxy from stack/conf yaml 2016-04-21 16:40:16 +00:00			`audience: {{ audience }}`
Add jwtproxy and configure verifier for `/secscan/notify` 2016-04-18 16:42:17 +00:00			`key_server:`
			`type: keyregistry`
			`options:`
Implement setup tool support for Clair Fixes #1387 2016-05-02 19:29:31 +00:00			`issuer: {{ security_issuer }}`
Split secscan endpoints into a new process 2016-05-02 15:38:00 +00:00			`registry: {{ registry }}`