quarkus:
  http:
    port: 0
    test-port: 0
    # Integration signatures use localhost as the public test authority. Keep the test listener
    # explicit so the production loopback default does not change the signed host.
    host: 0.0.0.0
    limits:
      max-body-size: ${floci.protocols.max-request-size}M
  # Groovy (a REST Assured dependency) starts DFA-cache-cleaner threads that never stop.
  # Loaded parent-first they live in the shared system classloader, so they cannot pin a
  # per-profile application classloader across the many app restarts of a test run.
  class-loading:
    parent-first-artifacts: org.apache.groovy:groovy

floci:
  base-url: "http://localhost:4566"
  network:
    security-group-enforcement:
      enabled: true
      helper-image: floci/network-helper:local
  default-region: us-east-1
  default-account-id: "000000000000"
  ai-mock-config-file: ${AI_MOCK_CONFIG:src/test/resources/fixtures/ai-mock-config.json}
  storage:
    mode: memory
    persistent-path: ./target/test-data
    prune-volumes-on-delete: true
    wal:
      compaction-interval-ms: 60000
    services:
      ssm:
        flush-interval-ms: 60000
      dynamodb:
        flush-interval-ms: 60000
      sns:
        flush-interval-ms: 60000
      lambda:
        flush-interval-ms: 60000
      cloudwatchlogs:
        flush-interval-ms: 60000
      cloudwatchmetrics:
        flush-interval-ms: 60000
      secretsmanager:
        flush-interval-ms: 60000
      acm:
        flush-interval-ms: 60000
      opensearch:
        flush-interval-ms: 60000
      sagemaker:
        flush-interval-ms: 60000
      batch:
        flush-interval-ms: 60000
      lightsail:
        flush-interval-ms: 60000
      codepipeline:
        flush-interval-ms: 60000
      s3vectors:
        flush-interval-ms: 60000
      s3tables:
        flush-interval-ms: 60000
      ecs:
        flush-interval-ms: 60000
      codebuild:
        flush-interval-ms: 60000
      config:
        flush-interval-ms: 60000
      transcribe:
        flush-interval-ms: 60000
      codedeploy:
        flush-interval-ms: 60000
      tagging:
        flush-interval-ms: 60000
      elasticbeanstalk:
        flush-interval-ms: 60000
      cloudfront:
      appsync:
        flush-interval-ms: 60000
      rum:
        flush-interval-ms: 60000
      resourceexplorer2:
        mode: memory
        flush-interval-ms: 60000
      fis:
        flush-interval-ms: 60000
      guardduty:
        flush-interval-ms: 60000
      emrserverless:
        flush-interval-ms: 60000
      lakeformation:
        flush-interval-ms: 60000

  auth:
    validate-signatures: false
    presign-secret: test-secret

  security:
    extra-cors-allowed-origins: ${EXTRA_CORS_ALLOWED_ORIGINS:}
    extra-cors-allowed-headers: ${EXTRA_CORS_ALLOWED_HEADERS:}
    extra-cors-expose-headers: ${EXTRA_CORS_EXPOSE_HEADERS:}
    disable-cors-headers: false
    # The test listener binds all interfaces so Quarkus keeps localhost as its test authority.
    # This is test-only; production keeps the loopback default.
    allow-unsafe-network-exposure: true
    allow-private-jwt-targets: true

  init-hooks:
    shell-executable: /bin/sh
    timeout-seconds: 5
    shutdown-grace-period-seconds: 2

  tls:
    enabled: false
    self-signed: true

  protocols:
    strict-claiming: false
    reject-unknown-service-scope: true

  docker:
    log-max-size: "10m"
    log-max-file: "3"
    resource-namespace: ""

  services:
    ssm:
      enabled: true
      max-parameter-history: 5
    sqs:
      enabled: true
      default-visibility-timeout: 30
      max-message-size: 1048576
    s3:
      enabled: true
      enforce-auth: false
      default-presign-expiry-seconds: 3600
      global-bucket-namespace: false
    dynamodb:
      enabled: true
    sns:
      enabled: true
    lambda:
      enabled: true
      docker-flags: ""
      honour-architectures: false
      zip-max-entries: 100000
      # aws-config-path:
      hot-reload:
        enabled: true
    apigateway:
      enabled: true
      vtl-max-loops: 10000
      vtl-max-output-chars: 1048576
      vtl-timeout-millis: 5000
    apigatewayv2:
      enabled: true
    iam:
      enabled: true
      enforcement-enabled: false
      seed-deployer-principal: false
    msk:
      enabled: true
      mock: true
      default-image: "redpandadata/redpanda:latest"
    kafkaconnect:
      enabled: true
      mock: true
      worker-image: apache/kafka:3.9.0
    amazonmq:
      enabled: true
      mock: true
      amqp-host-port-base: 5672
      amqp-host-port-max: 5699
      console-host-port-base: 15672
      console-host-port-max: 15699
    kinesis-analytics:
      enabled: true
      mock: true
    elasticache:
      enabled: true
      proxy-base-port: 6379
      proxy-max-port: 6399
      default-image: "valkey/valkey:8"
      default-memcached-image: "memcached:1.6"
    memorydb:
      enabled: true
      mock: false
      proxy-base-port: 6400
      proxy-max-port: 6419
      default-image: "valkey/valkey:8"
    redshift:
      enabled: true
      default-port: 5439
      image-version: postgres:15-alpine
      poll-interval-ms: 1000
      proxy-base-port: 7100
      proxy-max-port: 7199
      default-credential-duration-seconds: 900
      proxy-handshake-timeout-millis: 10000
      proxy-backend-connect-timeout-millis: 5000
      proxy-max-connections: 100
    rds:
      enabled: true
      mock: false
      proxy-base-port: 7001
      proxy-max-port: 7099
      default-sql-server-image: "mcr.microsoft.com/mssql/server:2022-latest"
      proxy-handshake-timeout-millis: 10000
      proxy-backend-connect-timeout-millis: 5000
      proxy-max-connections: 100
    rds-data:
      enabled: true
      transaction-ttl-seconds: 180
    redshift-data:
      enabled: true
      result-ttl-hours: 24
    neptune:
      enabled: true
      proxy-base-port: 8182
      proxy-max-port: 8282
      default-image: "tinkerpop/gremlin-server:3.7.3"
    eventbridge:
      enabled: true
    cloudmap:
      enabled: true
    emr:
      enabled: true
    wafv2:
      enabled: true
    scheduler:
      enabled: true
    cloudwatchlogs:
      enabled: true
      max-events-per-query: 10000
    cloudwatchmetrics:
      enabled: true
    secretsmanager:
      enabled: true
      default-recovery-window-days: 30
    kinesis:
      enabled: true
    firehose:
      enabled: true
      tick-interval-seconds: 10
      flush-record-count: 0
      staging-bucket: floci-firehose-staging
    kms:
      enabled: true
    cognito:
      enabled: true
    stepfunctions:
      enabled: true
      allow-plaintext-http: true
      mock-config-file: ${SFN_MOCK_CONFIG:src/test/resources/fixtures/sfn-mock-config.json}
    swf:
      enabled: true
      timeout-sweep-enabled: true
      timeout-sweep-interval-seconds: 1
    cloudformation:
      enabled: true
      # Fail an AWS::Lambda::Function whose S3 code cannot be read, as real CloudFormation
      # does. Set true to fall back to the built-in stub handler instead (issue #2648).
      allow-stub-lambda-code: false
      # Pinned to the shipped default so a test sees what a user sees; the strict-mode test
      # overrides it with its own profile.
      allow-stub-unsupported-resource-types: true
    acm:
      enabled: true
      validation-wait-seconds: 0
    athena:
      enabled: true
      mock: true
    glue:
      enabled: true
    ses:
      enabled: true
    opensearch:
      enabled: true
      mock: true
      proxy-base-port: 9400
      proxy-max-port: 9499
    ec2:
      enabled: true
      imds-port: 9169
      ssh-port-range-start: 2200
      ssh-port-range-end: 2299
      publish-security-group-ports: true
      app-port-range-start: 30000
      app-port-range-end: 30999
      max-published-ports-per-instance: 20
      socat-image: alpine/socat
      mock: true
      aws-faithful-private-ip: false
      # container-ips-routable: true  # see src/main/resources/application.yml
      # Off explicitly, not merely by implication of mock: true above. Tests must not create or
      # reconcile Docker networks on whatever daemon CI happens to have.
      vpc-networks:
        enabled: false
    ecs:
      enabled: true
      mock: true
      host-volume-roots: []
      allow-unsafe-host-volumes: false
    appconfig:
      enabled: true
    appconfigdata:
      enabled: true
    ecr:
      enabled: true
    ui:
      enabled: true
    bedrock:
      enabled: true
    bedrock-runtime:
      enabled: true
    eks:
      enabled: true
      mock: true
      ecr-registry-mirror: true
      imds: false
      irsa-signing-key: true
    mwaa:
      enabled: true
      mock: true
    pipes:
      enabled: true
    elb:
      enabled: true
      mock: true
    elbv2:
      enabled: true
      mock: true
      listener-forwarder-image: alpine/socat:1.8.1.3
    codebuild:
      enabled: true
      # docker-network: floci-network
    sagemaker:
      enabled: true
      # docker-network: floci-network
      gpu:
        # Off by default: an existing deployment keeps launching CPU-only
        # containers. How many GPUs an ml.* type has is shipped in
        # sagemaker/instance-type-catalog.yaml; this is only about which of
        # this machine's devices Floci may hand out.
        enabled: false
        # cdi | device-ids | count. Podman resolves only cdi, and accepts
        # count while attaching no device, so cdi fails loudly instead.
        mode: cdi
        # Required for cdi and device-ids modes; unset allows no device.
        # devices:
        #   - nvidia.com/gpu=GPU-<uuid>
    batch:
      enabled: true
      runner-mode: immediate
    codedeploy:
      enabled: true
    codepipeline:
      enabled: true
    autoscaling:
      enabled: true
    applicationautoscaling:
      enabled: true
    elasticbeanstalk:
      enabled: true
    transfer:
      enabled: true
    backup:
      enabled: true
      job-completion-delay-seconds: 1
    fis:
      enabled: true
    route53:
      enabled: true
    textract:
      enabled: true
    comprehend:
      enabled: true
    rekognition:
      enabled: true
    translate:
      enabled: true
    pricing:
      enabled: true
    ce:
      enabled: true
    cur:
      enabled: true
      emit-mode: off
    bcm-pricing-calculator:
      enabled: true
    timestream-influxdb:
      enabled: true
      mock: true
    bcm-data-exports:
      enabled: true
      emit-mode: off
    oam:
      enabled: true
    cloudtrail:
      enabled: true
      flush-interval-seconds: 3600
    lightsail:
      enabled: true
    cloudcontrol:
      enabled: true
    resourceexplorer2:
      enabled: true
    cloudfront:
      enabled: true
      allowed-private-origin-hosts: []
    appsync:
      enabled: true
      schema-worker-threads: 4
      schema-worker-shutdown-timeout-seconds: 30
      vtl-max-loops: 10000
      vtl-max-output-chars: 1048576
      vtl-timeout-millis: 5000
    s3vectors:
      enabled: true
    s3tables:
      enabled: true
    iot:
      enabled: true
      rule-sql-strict: false
      mqtt:
        enabled: true
        auto-start: false
        host: 127.0.0.1
        port: 1883
        tls-port: 8883
    iotdata:
      enabled: true
    cloudhsmv2:
      enabled: true
    efs:
      enabled: true
    organizations:
      enabled: true
    rum:
      enabled: true
    networkfirewall:
      enabled: true
    servicecatalog:
      enabled: true
    guardduty:
      enabled: true
    emrserverless:
      enabled: true
    ssoadmin:
      enabled: true
    ssooidc:
      enabled: true
      local-principal-id: ${FLOCI_SERVICES_SSOOIDC_LOCAL_PRINCIPAL_ID:}
    macie2:
      enabled: true
    account:
      enabled: true
    controlcatalog:
      enabled: true
    accessanalyzer:
      enabled: true
    identitystore:
      enabled: true
      scim-bearer-token: ${FLOCI_SERVICES_IDENTITYSTORE_SCIM_BEARER_TOKEN:floci-scim-token}
    budgets:
      enabled: true
    inspector2:
      enabled: true
    securityhub:
      enabled: true
    detective:
      enabled: true
    controltower:
      enabled: true
      seed-landing-zone: true
    route53resolver:
      enabled: true
    connect:
      enabled: true
    appintegrations:
      enabled: true
    cognitoidentity:
      enabled: true
    globalaccelerator:
      enabled: true
    datasync:
      enabled: true
    aps:
      enabled: true
    lakeformation:
      enabled: true
    tagging:
      enabled: true
    configservice:
      enabled: true
    transcribe:
      enabled: true
    docdb:
      enabled: true
      mock: false
      default-image: "mongo:7.0"
    bedrock-agent-core:
      enabled: true
    bedrock-agent-core-control:
      enabled: true
    servicequotas:
      enabled: true
    verifiedpermissions:
      enabled: true
    ram:
      enabled: true
    codegurureviewer:
      enabled: true
    codeartifact:
      enabled: true
    marketplace:
      enabled: true
    dms:
      enabled: true