520 lines
13 KiB
YAML
520 lines
13 KiB
YAML
quarkus:
|
|
http:
|
|
port: 0
|
|
test-port: 0
|
|
# Integration signatures use localhost as the public test authority. Keep the test listener
|
|
# explicit so the production loopback default does not change the signed host.
|
|
host: 0.0.0.0
|
|
limits:
|
|
max-body-size: ${floci.protocols.max-request-size}M
|
|
# Groovy (a REST Assured dependency) starts DFA-cache-cleaner threads that never stop.
|
|
# Loaded parent-first they live in the shared system classloader, so they cannot pin a
|
|
# per-profile application classloader across the many app restarts of a test run.
|
|
class-loading:
|
|
parent-first-artifacts: org.apache.groovy:groovy
|
|
|
|
floci:
|
|
base-url: "http://localhost:4566"
|
|
network:
|
|
security-group-enforcement:
|
|
enabled: true
|
|
helper-image: floci/network-helper:local
|
|
default-region: us-east-1
|
|
default-account-id: "000000000000"
|
|
ai-mock-config-file: ${AI_MOCK_CONFIG:src/test/resources/fixtures/ai-mock-config.json}
|
|
storage:
|
|
mode: memory
|
|
persistent-path: ./target/test-data
|
|
prune-volumes-on-delete: true
|
|
wal:
|
|
compaction-interval-ms: 60000
|
|
services:
|
|
ssm:
|
|
flush-interval-ms: 60000
|
|
dynamodb:
|
|
flush-interval-ms: 60000
|
|
sns:
|
|
flush-interval-ms: 60000
|
|
lambda:
|
|
flush-interval-ms: 60000
|
|
cloudwatchlogs:
|
|
flush-interval-ms: 60000
|
|
cloudwatchmetrics:
|
|
flush-interval-ms: 60000
|
|
secretsmanager:
|
|
flush-interval-ms: 60000
|
|
acm:
|
|
flush-interval-ms: 60000
|
|
opensearch:
|
|
flush-interval-ms: 60000
|
|
sagemaker:
|
|
flush-interval-ms: 60000
|
|
batch:
|
|
flush-interval-ms: 60000
|
|
lightsail:
|
|
flush-interval-ms: 60000
|
|
codepipeline:
|
|
flush-interval-ms: 60000
|
|
s3vectors:
|
|
flush-interval-ms: 60000
|
|
s3tables:
|
|
flush-interval-ms: 60000
|
|
ecs:
|
|
flush-interval-ms: 60000
|
|
codebuild:
|
|
flush-interval-ms: 60000
|
|
config:
|
|
flush-interval-ms: 60000
|
|
transcribe:
|
|
flush-interval-ms: 60000
|
|
codedeploy:
|
|
flush-interval-ms: 60000
|
|
tagging:
|
|
flush-interval-ms: 60000
|
|
elasticbeanstalk:
|
|
flush-interval-ms: 60000
|
|
cloudfront:
|
|
appsync:
|
|
flush-interval-ms: 60000
|
|
rum:
|
|
flush-interval-ms: 60000
|
|
resourceexplorer2:
|
|
mode: memory
|
|
flush-interval-ms: 60000
|
|
fis:
|
|
flush-interval-ms: 60000
|
|
guardduty:
|
|
flush-interval-ms: 60000
|
|
emrserverless:
|
|
flush-interval-ms: 60000
|
|
lakeformation:
|
|
flush-interval-ms: 60000
|
|
|
|
auth:
|
|
validate-signatures: false
|
|
presign-secret: test-secret
|
|
|
|
security:
|
|
extra-cors-allowed-origins: ${EXTRA_CORS_ALLOWED_ORIGINS:}
|
|
extra-cors-allowed-headers: ${EXTRA_CORS_ALLOWED_HEADERS:}
|
|
extra-cors-expose-headers: ${EXTRA_CORS_EXPOSE_HEADERS:}
|
|
disable-cors-headers: false
|
|
# The test listener binds all interfaces so Quarkus keeps localhost as its test authority.
|
|
# This is test-only; production keeps the loopback default.
|
|
allow-unsafe-network-exposure: true
|
|
allow-private-jwt-targets: true
|
|
|
|
init-hooks:
|
|
shell-executable: /bin/sh
|
|
timeout-seconds: 5
|
|
shutdown-grace-period-seconds: 2
|
|
|
|
tls:
|
|
enabled: false
|
|
self-signed: true
|
|
|
|
protocols:
|
|
strict-claiming: false
|
|
reject-unknown-service-scope: true
|
|
|
|
docker:
|
|
log-max-size: "10m"
|
|
log-max-file: "3"
|
|
resource-namespace: ""
|
|
|
|
services:
|
|
ssm:
|
|
enabled: true
|
|
max-parameter-history: 5
|
|
sqs:
|
|
enabled: true
|
|
default-visibility-timeout: 30
|
|
max-message-size: 1048576
|
|
s3:
|
|
enabled: true
|
|
enforce-auth: false
|
|
default-presign-expiry-seconds: 3600
|
|
global-bucket-namespace: false
|
|
dynamodb:
|
|
enabled: true
|
|
sns:
|
|
enabled: true
|
|
lambda:
|
|
enabled: true
|
|
docker-flags: ""
|
|
honour-architectures: false
|
|
zip-max-entries: 100000
|
|
# aws-config-path:
|
|
hot-reload:
|
|
enabled: true
|
|
apigateway:
|
|
enabled: true
|
|
vtl-max-loops: 10000
|
|
vtl-max-output-chars: 1048576
|
|
vtl-timeout-millis: 5000
|
|
apigatewayv2:
|
|
enabled: true
|
|
iam:
|
|
enabled: true
|
|
enforcement-enabled: false
|
|
seed-deployer-principal: false
|
|
msk:
|
|
enabled: true
|
|
mock: true
|
|
default-image: "redpandadata/redpanda:latest"
|
|
kafkaconnect:
|
|
enabled: true
|
|
mock: true
|
|
worker-image: apache/kafka:3.9.0
|
|
amazonmq:
|
|
enabled: true
|
|
mock: true
|
|
amqp-host-port-base: 5672
|
|
amqp-host-port-max: 5699
|
|
console-host-port-base: 15672
|
|
console-host-port-max: 15699
|
|
kinesis-analytics:
|
|
enabled: true
|
|
mock: true
|
|
elasticache:
|
|
enabled: true
|
|
proxy-base-port: 6379
|
|
proxy-max-port: 6399
|
|
default-image: "valkey/valkey:8"
|
|
default-memcached-image: "memcached:1.6"
|
|
memorydb:
|
|
enabled: true
|
|
mock: false
|
|
proxy-base-port: 6400
|
|
proxy-max-port: 6419
|
|
default-image: "valkey/valkey:8"
|
|
redshift:
|
|
enabled: true
|
|
default-port: 5439
|
|
image-version: postgres:15-alpine
|
|
poll-interval-ms: 1000
|
|
proxy-base-port: 7100
|
|
proxy-max-port: 7199
|
|
default-credential-duration-seconds: 900
|
|
proxy-handshake-timeout-millis: 10000
|
|
proxy-backend-connect-timeout-millis: 5000
|
|
proxy-max-connections: 100
|
|
rds:
|
|
enabled: true
|
|
mock: false
|
|
proxy-base-port: 7001
|
|
proxy-max-port: 7099
|
|
default-sql-server-image: "mcr.microsoft.com/mssql/server:2022-latest"
|
|
proxy-handshake-timeout-millis: 10000
|
|
proxy-backend-connect-timeout-millis: 5000
|
|
proxy-max-connections: 100
|
|
rds-data:
|
|
enabled: true
|
|
transaction-ttl-seconds: 180
|
|
redshift-data:
|
|
enabled: true
|
|
result-ttl-hours: 24
|
|
neptune:
|
|
enabled: true
|
|
proxy-base-port: 8182
|
|
proxy-max-port: 8282
|
|
default-image: "tinkerpop/gremlin-server:3.7.3"
|
|
eventbridge:
|
|
enabled: true
|
|
cloudmap:
|
|
enabled: true
|
|
emr:
|
|
enabled: true
|
|
wafv2:
|
|
enabled: true
|
|
scheduler:
|
|
enabled: true
|
|
cloudwatchlogs:
|
|
enabled: true
|
|
max-events-per-query: 10000
|
|
cloudwatchmetrics:
|
|
enabled: true
|
|
secretsmanager:
|
|
enabled: true
|
|
default-recovery-window-days: 30
|
|
kinesis:
|
|
enabled: true
|
|
firehose:
|
|
enabled: true
|
|
tick-interval-seconds: 10
|
|
flush-record-count: 0
|
|
staging-bucket: floci-firehose-staging
|
|
kms:
|
|
enabled: true
|
|
cognito:
|
|
enabled: true
|
|
stepfunctions:
|
|
enabled: true
|
|
allow-plaintext-http: true
|
|
mock-config-file: ${SFN_MOCK_CONFIG:src/test/resources/fixtures/sfn-mock-config.json}
|
|
swf:
|
|
enabled: true
|
|
timeout-sweep-enabled: true
|
|
timeout-sweep-interval-seconds: 1
|
|
cloudformation:
|
|
enabled: true
|
|
# Fail an AWS::Lambda::Function whose S3 code cannot be read, as real CloudFormation
|
|
# does. Set true to fall back to the built-in stub handler instead (issue #2648).
|
|
allow-stub-lambda-code: false
|
|
# Pinned to the shipped default so a test sees what a user sees; the strict-mode test
|
|
# overrides it with its own profile.
|
|
allow-stub-unsupported-resource-types: true
|
|
acm:
|
|
enabled: true
|
|
validation-wait-seconds: 0
|
|
athena:
|
|
enabled: true
|
|
mock: true
|
|
glue:
|
|
enabled: true
|
|
ses:
|
|
enabled: true
|
|
opensearch:
|
|
enabled: true
|
|
mock: true
|
|
proxy-base-port: 9400
|
|
proxy-max-port: 9499
|
|
ec2:
|
|
enabled: true
|
|
imds-port: 9169
|
|
ssh-port-range-start: 2200
|
|
ssh-port-range-end: 2299
|
|
publish-security-group-ports: true
|
|
app-port-range-start: 30000
|
|
app-port-range-end: 30999
|
|
max-published-ports-per-instance: 20
|
|
socat-image: alpine/socat
|
|
mock: true
|
|
aws-faithful-private-ip: false
|
|
# container-ips-routable: true # see src/main/resources/application.yml
|
|
# Off explicitly, not merely by implication of mock: true above. Tests must not create or
|
|
# reconcile Docker networks on whatever daemon CI happens to have.
|
|
vpc-networks:
|
|
enabled: false
|
|
ecs:
|
|
enabled: true
|
|
mock: true
|
|
host-volume-roots: []
|
|
allow-unsafe-host-volumes: false
|
|
appconfig:
|
|
enabled: true
|
|
appconfigdata:
|
|
enabled: true
|
|
ecr:
|
|
enabled: true
|
|
ui:
|
|
enabled: true
|
|
bedrock:
|
|
enabled: true
|
|
bedrock-runtime:
|
|
enabled: true
|
|
eks:
|
|
enabled: true
|
|
mock: true
|
|
ecr-registry-mirror: true
|
|
imds: false
|
|
irsa-signing-key: true
|
|
mwaa:
|
|
enabled: true
|
|
mock: true
|
|
pipes:
|
|
enabled: true
|
|
elb:
|
|
enabled: true
|
|
mock: true
|
|
elbv2:
|
|
enabled: true
|
|
mock: true
|
|
listener-forwarder-image: alpine/socat:1.8.1.3
|
|
codebuild:
|
|
enabled: true
|
|
# docker-network: floci-network
|
|
sagemaker:
|
|
enabled: true
|
|
# docker-network: floci-network
|
|
gpu:
|
|
# Off by default: an existing deployment keeps launching CPU-only
|
|
# containers. How many GPUs an ml.* type has is shipped in
|
|
# sagemaker/instance-type-catalog.yaml; this is only about which of
|
|
# this machine's devices Floci may hand out.
|
|
enabled: false
|
|
# cdi | device-ids | count. Podman resolves only cdi, and accepts
|
|
# count while attaching no device, so cdi fails loudly instead.
|
|
mode: cdi
|
|
# Required for cdi and device-ids modes; unset allows no device.
|
|
# devices:
|
|
# - nvidia.com/gpu=GPU-<uuid>
|
|
batch:
|
|
enabled: true
|
|
runner-mode: immediate
|
|
codedeploy:
|
|
enabled: true
|
|
codepipeline:
|
|
enabled: true
|
|
autoscaling:
|
|
enabled: true
|
|
applicationautoscaling:
|
|
enabled: true
|
|
elasticbeanstalk:
|
|
enabled: true
|
|
transfer:
|
|
enabled: true
|
|
backup:
|
|
enabled: true
|
|
job-completion-delay-seconds: 1
|
|
fis:
|
|
enabled: true
|
|
route53:
|
|
enabled: true
|
|
textract:
|
|
enabled: true
|
|
comprehend:
|
|
enabled: true
|
|
rekognition:
|
|
enabled: true
|
|
translate:
|
|
enabled: true
|
|
pricing:
|
|
enabled: true
|
|
ce:
|
|
enabled: true
|
|
cur:
|
|
enabled: true
|
|
emit-mode: off
|
|
bcm-pricing-calculator:
|
|
enabled: true
|
|
timestream-influxdb:
|
|
enabled: true
|
|
mock: true
|
|
bcm-data-exports:
|
|
enabled: true
|
|
emit-mode: off
|
|
oam:
|
|
enabled: true
|
|
cloudtrail:
|
|
enabled: true
|
|
flush-interval-seconds: 3600
|
|
lightsail:
|
|
enabled: true
|
|
cloudcontrol:
|
|
enabled: true
|
|
resourceexplorer2:
|
|
enabled: true
|
|
cloudfront:
|
|
enabled: true
|
|
allowed-private-origin-hosts: []
|
|
appsync:
|
|
enabled: true
|
|
schema-worker-threads: 4
|
|
schema-worker-shutdown-timeout-seconds: 30
|
|
vtl-max-loops: 10000
|
|
vtl-max-output-chars: 1048576
|
|
vtl-timeout-millis: 5000
|
|
s3vectors:
|
|
enabled: true
|
|
s3tables:
|
|
enabled: true
|
|
iot:
|
|
enabled: true
|
|
rule-sql-strict: false
|
|
mqtt:
|
|
enabled: true
|
|
auto-start: false
|
|
host: 127.0.0.1
|
|
port: 1883
|
|
tls-port: 8883
|
|
iotdata:
|
|
enabled: true
|
|
cloudhsmv2:
|
|
enabled: true
|
|
efs:
|
|
enabled: true
|
|
organizations:
|
|
enabled: true
|
|
rum:
|
|
enabled: true
|
|
networkfirewall:
|
|
enabled: true
|
|
servicecatalog:
|
|
enabled: true
|
|
guardduty:
|
|
enabled: true
|
|
emrserverless:
|
|
enabled: true
|
|
ssoadmin:
|
|
enabled: true
|
|
ssooidc:
|
|
enabled: true
|
|
local-principal-id: ${FLOCI_SERVICES_SSOOIDC_LOCAL_PRINCIPAL_ID:}
|
|
macie2:
|
|
enabled: true
|
|
account:
|
|
enabled: true
|
|
controlcatalog:
|
|
enabled: true
|
|
accessanalyzer:
|
|
enabled: true
|
|
identitystore:
|
|
enabled: true
|
|
scim-bearer-token: ${FLOCI_SERVICES_IDENTITYSTORE_SCIM_BEARER_TOKEN:floci-scim-token}
|
|
budgets:
|
|
enabled: true
|
|
inspector2:
|
|
enabled: true
|
|
securityhub:
|
|
enabled: true
|
|
detective:
|
|
enabled: true
|
|
controltower:
|
|
enabled: true
|
|
seed-landing-zone: true
|
|
route53resolver:
|
|
enabled: true
|
|
connect:
|
|
enabled: true
|
|
appintegrations:
|
|
enabled: true
|
|
cognitoidentity:
|
|
enabled: true
|
|
globalaccelerator:
|
|
enabled: true
|
|
datasync:
|
|
enabled: true
|
|
aps:
|
|
enabled: true
|
|
lakeformation:
|
|
enabled: true
|
|
tagging:
|
|
enabled: true
|
|
configservice:
|
|
enabled: true
|
|
transcribe:
|
|
enabled: true
|
|
docdb:
|
|
enabled: true
|
|
mock: false
|
|
default-image: "mongo:7.0"
|
|
bedrock-agent-core:
|
|
enabled: true
|
|
bedrock-agent-core-control:
|
|
enabled: true
|
|
servicequotas:
|
|
enabled: true
|
|
verifiedpermissions:
|
|
enabled: true
|
|
ram:
|
|
enabled: true
|
|
codegurureviewer:
|
|
enabled: true
|
|
codeartifact:
|
|
enabled: true
|
|
marketplace:
|
|
enabled: true
|
|
dms:
|
|
enabled: true
|