-
Notifications
You must be signed in to change notification settings - Fork 15
/
bootstrap.env
executable file
·39 lines (30 loc) · 1.86 KB
/
bootstrap.env
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# For more details on the required environment
# variables, please see the README
# Make sure you comment out the section for the
# platform you're not using, and fill in the
# appropriate values for each env var
export CONJUR_APPLIANCE_IMAGE=[local Conjur Docker image - should match master version]
export CONJUR_ACCOUNT=[name of conjur account with which to authenticate to seed service]
# Only needed if FOLLOWER_SEED is a url to a remote seed service
export FOLLOWER_SEED=[absolute path to local follower seed file or a URL to the seed service]
export CONJUR_NAMESPACE_NAME=[namespace to deploy Conjur to]
export AUTHENTICATOR_ID=[unique authenticator ID for this deployment]
export CONJUR_FOLLOWER_COUNT=[number of follower instances to deploy]
# optional - if not present its value will default to "host/conjur/authn-k8s/$AUTHENTICATOR_ID/apps/$CONJUR_NAMESPACE_NAME/service_account/conjur-cluster"
export CONJUR_AUTHN_LOGIN=[ID of the Conjur host that will authenticate with Conjur]
# optional - if not present its value will default to "authn,authn-k8s/$AUTHENTICATOR_ID"
export CONJUR_AUTHENTICATORS=[comma-separated list of enabled authenticators]
export STOP_RUNNING_ENV=[set to 'true' if the namespace $CONJUR_NAMESPACE_NAME and all of its content should be deleted when the start script is run]
#######
# OPENSHIFT CONFIG (comment out all lines in this section if not using this platform)
#######
export PLATFORM=openshift
export OSHIFT_CLUSTER_ADMIN_USERNAME=[username of cluster admin]
export OSHIFT_CONJUR_ADMIN_USERNAME=[username of Conjur namespace admin]
export DOCKER_REGISTRY_PATH=docker-registry-<registry-namespace>.<routing-domain>
#######
# KUBERNETES CONFIG (comment out all lines in this section if not using this platform)
#######
export PLATFORM=kubernetes
export DOCKER_REGISTRY_URL=<registry-domain>
export DOCKER_REGISTRY_PATH=<registry-domain>/<additional-pathing>