apic_traceability_agent.yml

apic_traceability_agent:
  central:
    url: "${CENTRAL_URL:https://apicentral.axway.com}"
    organizationID: "${CENTRAL_ORGANIZATIONID}"
    team: ${CENTRAL_TEAM:""}
    deployment: "${CENTRAL_DEPLOYMENT:prod}"
    environment: "${CENTRAL_ENVIRONMENT}"
    agentName: ${CENTRAL_AGENTNAME:""}
    platformURL: "${CENTRAL_PLATFORMURL:https://platform.axway.com}"
    platformEnvironmentId: ${CENTRAL_PLATFORMENVIRONMENTID:""}
    lighthouseURL: ${CENTRAL_LIGHTHOUSEURL:"https://lighthouse.admin.axway.com"}
    publishUsage: ${CENTRAL_PUBLISHUSAGE:true}
    publishTraffic: ${CENTRAL_PUBLISHTRAFFIC:true}
    eventAggregationInterval: ${CENTRAL_EVENTAGGREGATIONINTERVAL:5m}
    reportActivityFrequency: ${CENTRAL_REPORTACTIVITYFREQUENCY:5m}
    auth:
      url: "${CENTRAL_AUTH_URL:https://login.axway.com/auth}"
      realm: "${CENTRAL_AUTH_REALM:Broker}"
      clientId: "${CENTRAL_AUTH_CLIENTID}"
      privateKey: "${CENTRAL_AUTH_PRIVATEKEY:/keys/private_key.pem}"
      publicKey: "${CENTRAL_AUTH_PUBLICKEY:/keys/public_key.pem}"
      keyPassword: ${CENTRAL_AUTH_KEYPASSWORD:""}
    ssl:
      minVersion: ${CENTRAL_SSL_MINVERSION:"TLS1.2"}
      maxVersion: ${CENTRAL_SSL_MAXVERSION:"TLS1.3"}
      nextProtos: ${CENTRAL_SSL_NEXTPROTOS:[]}
      cipherSuites: ${CENTRAL_SSL_CIPHERSUITES:["ECDHE-ECDSA-AES-256-GCM-SHA384", "ECDHE-RSA-AES-256-GCM-SHA384", "ECDHE-ECDSA-CHACHA20-POLY1305", "ECDHE-RSA-CHACHA20-POLY1305", "ECDHE-ECDSA-AES-128-GCM-SHA256", "ECDHE-RSA-AES-128-GCM-SHA256", "ECDHE-ECDSA-AES-128-CBC-SHA256", "ECDHE-RSA-AES-128-CBC-SHA256"]}
      insecureSkipVerify: ${CENTRAL_SSL_INSECURESKIPVERIFY:false}
  apic:
    logFile: ./logs/traffic.log
    processOnInput: ${APIC_PROCESSONINPUT:false}
    config_key_1: "value-1"
    config_key_3: "value-2"
    config_key_2: "value-3"
  log:
    level: ${LOG_LEVEL:info}
    format: ${LOG_FORMAT:json}
    output: ${LOG_OUTPUT:stdout}

queue:
  mem:
    events: ${QUEUE_MEM_EVENTS:2048}
    flush:
      min_events: ${QUEUE_MEM_FLUSH_MINEVENTS:100}
      timeout: ${QUEUE_MEM_FLUSH_TIMEOUT:1s}

# Condor Ingestion service
output.traceability:
  enabled: true
  hosts:
    - ${TRACEABILITY_HOST:"ingestion-lumberjack.datasearch.axway.com:453"}
  protocol: ${TRACEABILITY_PROTOCOL:"tcp"}
  compression_level: ${TRACEABILITY_COMPRESSIONLEVEL:3}
  bulk_max_size: ${TRACEABILITY_BULKMAXSIZE:100}
  timeout: ${TRACEABILITY_TIMEOUT:300s}
  pipelining: ${TRACEABILITY_PIPELINING:0}
  worker: ${TRACEABILITY_WORKER:2}
  loadbalance: ${TRACEABILITY_LOADBALANCE:true}
  slow_start: ${TRACEABILITY_SLOWSTART:true}
  ssl:
    enabled: ${TRACEABILITY_ENABLE_SSL:true}
    verification_mode: none
    cipher_suites:
      - "ECDHE-ECDSA-AES-128-GCM-SHA256"
      - "ECDHE-ECDSA-AES-256-GCM-SHA384"
      - "ECDHE-ECDSA-CHACHA20-POLY1305"
      - "ECDHE-RSA-AES-128-CBC-SHA256"
      - "ECDHE-RSA-AES-128-GCM-SHA256"
      - "ECDHE-RSA-AES-256-GCM-SHA384"
      - "ECDHE-RSA-CHACHA20-POLY1205"
  proxy_url: ${TRACEABILITY_PROXYURL:""}
  redaction:
    path:
      show: ${TRACEABILITY_REDACTION_PATH_SHOW:[]}
    queryArgument:
      show: ${TRACEABILITY_REDACTION_QUERYARGUMENT_SHOW:[]}
      sanitize: ${TRACEABILITY_REDACTION_QUERYARGUMENT_SANITIZE:[]}
    requestHeader:
      show: ${TRACEABILITY_REDACTION_REQUESTHEADER_SHOW:[]}
      sanitize: ${TRACEABILITY_REDACTION_REQUESTHEADER_SANITIZE:[]}
    responseHeader:
      show: ${TRACEABILITY_REDACTION_RESPONSEHEADER_SHOW:[]}
      sanitize: ${TRACEABILITY_REDACTION_RESPONSEHEADER_SANITIZE:[]}
  sampling:
    percentage: ${TRACEABILITY_SAMPLING_PERCENTAGE:1}

logging:
  metrics:
    enabled: false
  files:
    permissions: 0600
    name: ${LOG_FILE_NAME:traceability_agent.log}
    dir: ${LOG_FILE_PATH:logs}
    keepfiles: ${LOG_FILE_KEEPFILES:7}
    rotateeverybytes: ${LOG_FILE_ROTATEEVERYBYTES:10485760}