X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/fc3b155fb7ad82cf97cdb81a02a9cfaebe4389ff..b1aa6c85c3db947f0963b1bddb2784c115f5c97d:/services/api/config/application.default.yml diff --git a/services/api/config/application.default.yml b/services/api/config/application.default.yml index 40c9ef6dfc..cae6bbdf17 100644 --- a/services/api/config/application.default.yml +++ b/services/api/config/application.default.yml @@ -27,6 +27,11 @@ common: # generate permission signatures for Keep locators. It must be # identical to the permission key given to Keep. IMPORTANT: This is # a site secret. It should be at least 50 characters. + # + # Modifying blob_signing_key will invalidate all existing + # signatures, which can cause programs to fail (e.g., arv-put, + # arv-get, and Crunch jobs). To avoid errors, rotate keys only when + # no such processes are running. blob_signing_key: ~ # These settings are provided by your OAuth2 provider (e.g., @@ -65,6 +70,16 @@ common: # websockets, otherwise none at all. websocket_address: false + # Maximum number of websocket connections allowed + websocket_max_connections: 500 + + # Maximum number of events a single connection can be backlogged + websocket_max_notify_backlog: 1000 + + # Maximum number of subscriptions a single websocket connection can have + # active. + websocket_max_filters: 10 + # Git repositories must be readable by api server, or you won't be # able to submit crunch jobs. To pass the test suites, put a clone # of the arvados tree in {git_repositories_dir}/arvados.git or @@ -155,19 +170,31 @@ common: # still has permission) the client can retrieve the collection again # to get fresh signatures. # - # Datamanager considers an unreferenced block older than this to be - # eligible for garbage collection. Therefore, it should never be - # smaller than the corresponding value used by any local keepstore - # service (see keepstore -blob-signature-ttl flag). This rule - # prevents datamanager from trying to garbage-collect recently - # written blocks while clients are still holding valid signatures. + # This must be exactly equal to the -blob-signature-ttl flag used by + # keepstore servers. Otherwise, reading data blocks and saving + # collections will fail with HTTP 403 permission errors. + # + # Modifying blob_signature_ttl invalidates existing signatures; see + # blob_signing_key note above. # # The default is 2 weeks. blob_signature_ttl: 1209600 - # Default lifetime for ephemeral collections: 2 weeks. + # Default lifetime for ephemeral collections: 2 weeks. This must not + # be less than blob_signature_ttl. default_trash_lifetime: 1209600 + # Interval (seconds) between trash sweeps. During a trash sweep, + # collections are marked as trash if their trash_at time has + # arrived, and deleted if their delete_at time has arrived. + trash_sweep_interval: 60 + + # Maximum characters of (JSON-encoded) query parameters to include + # in each request log entry. When params exceed this size, they will + # be JSON-encoded, truncated to this size, and logged as + # params_truncated. + max_request_log_params_size: 2000 + # Maximum size (in bytes) allowed for a single API request. This # limit is published in the discovery document for use by clients. # Note: You must separately configure the upstream web server or @@ -199,6 +226,12 @@ common: # stderr logs from the logs table. clean_job_log_rows_after: <%= 30.days %> + # When you run the db:delete_old_container_logs task, it will find + # containers that have been finished for at least this many seconds, + # and delete their stdout, stderr, arv-mount, crunch-run, and + # crunchstat logs from the logs table. + clean_container_log_rows_after: <%= 30.days %> + # The maximum number of compute nodes that can be in use simultaneously # If this limit is reduced, any existing nodes with slot number >= new limit # will not be counted against the new limit. In other words, the new limit @@ -228,6 +261,19 @@ common: # silenced by throttling are not counted against this total. crunch_limit_log_bytes_per_job: 67108864 + # Attributes to suppress in events and audit logs. Notably, + # specifying ["manifest_text"] here typically makes the database + # smaller and faster. + # + # Warning: Using any non-empty value here can have undesirable side + # effects for any client or component that relies on event logs. + # Use at your own risk. + unlogged_attributes: [] + + # API methods to disable. Disabled methods are not listed in the + # discovery document, and respond 404 to all requests. + # Example: ["jobs.create", "pipeline_instances.create"] + disable_api_methods: [] ### ### Crunch, DNS & compute node management @@ -236,6 +282,17 @@ common: # Docker image to be used when none found in runtime_constraints of a job default_docker_image_for_jobs: false + # List of supported Docker Registry image formats that compute nodes + # are able to use. `arv keep docker` will error out if a user tries + # to store an image with an unsupported format. Use an empty array + # to skip the compatibility check (and display a warning message to + # that effect). + # + # Example for sites running docker < 1.10: ["v1"] + # Example for sites running docker >= 1.10: ["v2"] + # Example for disabling check: [] + docker_image_formats: ["v2"] + # :none or :slurm_immediate crunch_job_wrapper: :none @@ -338,6 +395,23 @@ common: # "git log". source_version: false + crunch_log_partial_line_throttle_period: 5 + + # Enable asynchronous permission graph rebuild. Must run + # script/permission-updater.rb as a separate process. When the permission + # cache is invalidated, the background process will update the permission + # graph cache. This feature is experimental! + async_permissions_update: false + + # Default value for container_count_max for container requests. This is the + # number of times Arvados will create a new container to satisfy a container + # request. If a container is cancelled it will retry a new container if + # container_count < container_count_max on any container requests associated + # with the cancelled container. + container_count_max: 3 + + # Default value for keep_cache_ram of a container's runtime_constraints. + container_default_keep_cache_ram: 268435456 development: force_ssl: false @@ -387,3 +461,6 @@ test: workbench_address: https://localhost:3001/ git_repositories_dir: <%= Rails.root.join 'tmp', 'git', 'test' %> git_internal_dir: <%= Rails.root.join 'tmp', 'internal.git' %> + websocket_address: <% if ENV['ARVADOS_TEST_EXPERIMENTAL_WS'] %>"wss://0.0.0.0:<%= ENV['ARVADOS_TEST_WSS_PORT'] %>/websocket"<% else %>false<% end %> + trash_sweep_interval: -1 + docker_image_formats: ["v1"]