X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/ae8aaa4c55762222c837fcce8e9ad6800ff8b128..f873463bfea88575f98e7a36b26ffbae9aa28aa6:/services/api/config/application.default.yml diff --git a/services/api/config/application.default.yml b/services/api/config/application.default.yml index 5241cb4378..a1c35f10fc 100644 --- a/services/api/config/application.default.yml +++ b/services/api/config/application.default.yml @@ -1,3 +1,7 @@ +# Copyright (C) The Arvados Authors. All rights reserved. +# +# SPDX-License-Identifier: AGPL-3.0 + # Do not use this file for site configuration. Create application.yml # instead (see application.yml.example). # @@ -46,28 +50,16 @@ common: # to log in. workbench_address: false - # The ARVADOS_WEBSOCKETS environment variable determines whether to - # serve http, websockets, or both. - # - # If ARVADOS_WEBSOCKETS="true", http and websockets are both served - # from the same process. - # - # If ARVADOS_WEBSOCKETS="ws-only", only websockets is served. + # Client-facing URI for websocket service. Nginx should be + # configured to proxy this URI to arvados-ws; see + # http://doc.arvados.org/install/install-ws.html # - # If ARVADOS_WEBSOCKETS="false" or not set at all, only http is - # served. In this case, you should have a separate process serving - # websockets, and the address of that service should be given here - # as websocket_address. + # If websocket_address is false (which is the default), no websocket + # server will be advertised to clients. This configuration is not + # supported. # - # If websocket_address is false (which is the default), the - # discovery document will tell clients to use the current server as - # the websocket service, or (if the current server does not have - # websockets enabled) not to use websockets at all. - # - # Example: Clients will connect to the specified endpoint. - #websocket_address: wss://127.0.0.1:3333/websocket - # Default: Clients will connect to this server if it's running - # websockets, otherwise none at all. + # Example: + #websocket_address: wss://ws.zzzzz.arvadosapi.com/websocket websocket_address: false # Maximum number of websocket connections allowed @@ -207,12 +199,10 @@ common: # normally be returned in a single response). # Note 1: This setting never reduces the number of returned rows to # zero, no matter how big the first data row is. - # Note 2: Currently, this only limits the - # arvados.v1.collections.list API (GET /arvados/v1/collections), and - # only takes the size of manifest_text into account. Other fields - # (e.g., "properties" hashes) are not counted against this limit - # when returning collections, and the limit is not applied at all - # for other data types. + # Note 2: Currently, this is only checked against a specific set of + # columns that tend to get large (collections.manifest_text, + # containers.mounts, workflows.definition). Other fields (e.g., + # "properties" hashes) are not counted against this limit. max_index_database_read: 134217728 # Maximum number of items to return when responding to a APIs that @@ -279,6 +269,8 @@ common: # silenced by throttling are not counted against this total. crunch_limit_log_bytes_per_job: 67108864 + crunch_log_partial_line_throttle_period: 5 + # Attributes to suppress in events and audit logs. Notably, # specifying ["manifest_text"] here typically makes the database # smaller and faster. @@ -369,15 +361,59 @@ common: assign_node_hostname: compute%d + ### + ### Job and container reuse logic. + ### + + # Include details about job reuse decisions in the server log. This + # causes additional database queries to run, so it should not be + # enabled unless you expect to examine the resulting logs for + # troubleshooting purposes. + log_reuse_decisions: false + + # Control job reuse behavior when two completed jobs match the + # search criteria and have different outputs. + # + # If true, in case of a conflict, reuse the earliest job (this is + # similar to container reuse behavior). + # + # If false, in case of a conflict, do not reuse any completed job, + # but do reuse an already-running job if available (this is the + # original job reuse behavior, and is still the default). + reuse_job_if_outputs_differ: false + + ### + ### Federation support. + ### + + # You can enable use of this cluster by users who are authenticated + # by a remote Arvados site. Control which remote hosts are trusted + # to authenticate which user IDs by configuring remote_hosts, + # remote_hosts_via_dns, or both. The default configuration disables + # remote authentication. + + # Map known prefixes to hosts. For example, if user IDs beginning + # with "zzzzz-" should be authenticated by the Arvados server at + # "zzzzz.example.com", use: + # + # remote_hosts: + # zzzzz: zzzzz.example.com + remote_hosts: {} + + # Use {prefix}.arvadosapi.com for any prefix not given in + # remote_hosts above. + remote_hosts_via_dns: false + ### ### Remaining assorted configuration options. ### arvados_theme: default - # Permit insecure (OpenSSL::SSL::VERIFY_NONE) connections to the Single Sign - # On (sso) server. Should only be enabled during development when the SSO - # server is using a self-signed cert. + # Permit insecure (OpenSSL::SSL::VERIFY_NONE) connections to the + # Single Sign On (sso) server and remote Arvados sites. Should only + # be enabled during development when the SSO server is using a + # self-signed cert. sso_insecure: false ## Set Time.zone default to the specified zone and make Active @@ -413,8 +449,6 @@ common: # "git log". source_version: false - crunch_log_partial_line_throttle_period: 5 - # Enable asynchronous permission graph rebuild. Must run # script/permission-updater.rb as a separate process. When the permission # cache is invalidated, the background process will update the permission @@ -431,6 +465,17 @@ common: # Default value for keep_cache_ram of a container's runtime_constraints. container_default_keep_cache_ram: 268435456 + # Token to be included in all healthcheck requests. Disabled by default. + # Server expects request header of the format "Authorization: Bearer xxx" + ManagementToken: false + + # URL of keep-web service. Provides read/write access to collections via + # HTTP and WebDAV protocols. + # + # Example: + # keep_web_service_url: https://download.uuid_prefix.arvadosapi.com/ + keep_web_service_url: false + development: force_ssl: false cache_classes: false @@ -441,7 +486,6 @@ development: action_mailer.perform_deliveries: false active_support.deprecation: :log action_dispatch.best_standards_support: :builtin - active_record.mass_assignment_sanitizer: :strict active_record.auto_explain_threshold_in_seconds: 0.5 assets.compress: false assets.debug: true @@ -451,7 +495,7 @@ production: cache_classes: true consider_all_requests_local: false action_controller.perform_caching: true - serve_static_assets: false + serve_static_files: false assets.compress: true assets.compile: false assets.digest: true @@ -459,7 +503,7 @@ production: test: force_ssl: false cache_classes: true - serve_static_assets: true + serve_static_files: true static_cache_control: public, max-age=3600 whiny_nils: true consider_all_requests_local: true @@ -468,7 +512,6 @@ test: action_controller.allow_forgery_protection: false action_mailer.delivery_method: :test active_support.deprecation: :stderr - active_record.mass_assignment_sanitizer: :strict uuid_prefix: zzzzz sso_app_id: arvados-server sso_app_secret: <%= rand(2**512).to_s(36) %> @@ -479,6 +522,6 @@ test: workbench_address: https://localhost:3001/ git_repositories_dir: <%= Rails.root.join 'tmp', 'git', 'test' %> git_internal_dir: <%= Rails.root.join 'tmp', 'internal.git' %> - websocket_address: <% if ENV['ARVADOS_TEST_EXPERIMENTAL_WS'] %>"wss://0.0.0.0:<%= ENV['ARVADOS_TEST_WSS_PORT'] %>/websocket"<% else %>false<% end %> + websocket_address: "wss://0.0.0.0:<%= ENV['ARVADOS_TEST_WSS_PORT'] %>/websocket" trash_sweep_interval: -1 docker_image_formats: ["v1"]