Commit 81178175 authored by Alok Joshi's avatar Alok Joshi
Browse files

Merge branch 'master' of...

Merge branch 'master' of https://community.opengroup.org/osdu/platform/system/search-service into use_debug_logs
parents 8168528d d6bcdb9b
Pipeline #49549 failed with stages
in 39 minutes and 25 seconds
......@@ -23,6 +23,7 @@ Here are steps to enable Policy service for a provider:
- Add and provide values for following runtime configuration in `application.properties`
```
service.policy.enabled=true
service.policy.id=search //policy_id from ${policy_service_endpoint}/api/policy/v1/policies.
service.policy.endpoint=${policy_service_endpoint}
policy.cache.timeout=<timeout_in_minutes>
PARTITION_API=${partition_service_endpoint}
......@@ -31,4 +32,4 @@ Here are steps to enable Policy service for a provider:
- This is an experimental feature and at this moment has following limitations
1. If the query has `returnedFields` set, it must contain all `acl, kind, legal` and `id`
2. In the current implementation, totalCount represents the number of records matching user query before the search policy is applied
3. Because the policy auth filter is applied outside of query handles, cursor may not point to the accurate data entry when using `query_with_cursor`
\ No newline at end of file
3. Because the policy auth filter is applied outside of query handles, cursor may not point to the accurate data entry when using `query_with_cursor`
......@@ -30,7 +30,9 @@ In order to run the service locally or remotely, you will need to have the follo
| `GOOGLE_APPLICATION_CREDENTIALS` | ex `/path/to/directory/service-key.json` | Service account credentials, you only need this if running locally | yes | https://console.cloud.google.com/iam-admin/serviceaccounts |
| `SECURITY_HTTPS_CERTIFICATE_TRUST` | ex `false` | Elastic client connection uses TrustSelfSignedStrategy(), if it is 'true' | false | output of infrastructure deployment |
| `SERVICE_PARTITION_ENABLED` | `true` OR `false` | Allow to configure TenantInfo provision by Partition service | no | - |
| `PARTITION_API` | ex `http://localhost:8080/api/partition/v1` | Partition service endpoint | no | - |
| `PARTITION_API` | ex `http://localhost:8080/api/partition/v1` | Partition service endpoint | no | output of infrastructure deployment |
| `POLICY_API` | ex `http://localhost:8080/api/policy/v1/` | Police service endpoint | no | output of infrastructure deployment |
| `POLICY_ID` | ex `search` | policeId from ex `http://localhost:8080/api/policy/v1/policies`. Look at `POLICY_API` | no | - |
### Run Locally
Check that maven is installed:
......@@ -190,9 +192,9 @@ Create king ring and key in the ***master project***
--purpose encryption
```
Add **Cloud KMS CryptoKey Encrypter/Decrypter** role to the **App Engine default service account** of the ***master project*** through IAM - Role tab
Add **Cloud KMS CryptoKey Encrypter/Decrypter** role to the **default service account** of the ***master project*** through IAM - Role tab
Add **Cloud KMS Encrypt/Decrypt** role to the **App Engine default service account** of ***master project***
Add **Cloud KMS Encrypt/Decrypt** role to the **default service account** of ***master project*** through IAM - Role tab
#### Memory Store (Redis Instance) Setup
......@@ -218,4 +220,4 @@ Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
\ No newline at end of file
limitations under the License.
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment