b8a7167c4e
* MQ 9.1.3 changes * Use crtmqdir -a * Allow generation of TLS certificate with given hostname * Remove check for certificate env variable * Updated manifests and changelog for 913 * Use MQ externals to configure console frame ancestors * Create /run/mqm * Go sec fixes * Set SAN when generating certificates * Remove image source and commit
45 lines
1.9 KiB
Smarty
45 lines
1.9 KiB
Smarty
<?xml version="1.0" encoding="UTF-8"?>
|
|
<server>
|
|
<featureManager>
|
|
<feature>openidConnectClient-1.0</feature>
|
|
<feature>ssl-1.0</feature>
|
|
</featureManager>
|
|
<enterpriseApplication id="com.ibm.mq.console">
|
|
<application-bnd>
|
|
<security-role name="MQWebAdmin">
|
|
<group name="MQWebUI" realm="defaultRealm"/>
|
|
{{- range $index, $element := .AdminUser}}
|
|
<user name="admin{{$index}}" access-id="{{.}}"/>
|
|
{{- end}}
|
|
</security-role>
|
|
</application-bnd>
|
|
</enterpriseApplication>
|
|
<enterpriseApplication id="com.ibm.mq.rest">
|
|
<application-bnd>
|
|
<security-role name="MQWebAdmin">
|
|
<group name="MQWebUI" realm="defaultRealm"/>
|
|
</security-role>
|
|
<security-role name="MQWebUser">
|
|
<group name="MQWebMessaging" realm="defaultRealm"/>
|
|
</security-role>
|
|
</application-bnd>
|
|
</enterpriseApplication>
|
|
<openidConnectClient id="mqclient"
|
|
clientId="${env.MQ_OIDC_CLIENT_ID}"
|
|
clientSecret="${env.MQ_OIDC_CLIENT_SECRET}"
|
|
uniqueUserIdentifier="${env.MQ_OIDC_UNIQUE_USER_IDENTIFIER}"
|
|
authorizationEndpointUrl="${env.MQ_OIDC_AUTHORIZATION_ENDPOINT}"
|
|
tokenEndpointUrl="${env.MQ_OIDC_TOKEN_ENDPOINT}"
|
|
scope="openid profile email"
|
|
inboundPropagation="supported"
|
|
jwkEndpointUrl="${env.MQ_OIDC_JWK_ENDPOINT}"
|
|
signatureAlgorithm="RS256"
|
|
issuerIdentifier="${env.MQ_OIDC_ISSUER_IDENTIFIER}">
|
|
</openidConnectClient>
|
|
<variable name="httpHost" value="*"/>
|
|
<variable name="managementMode" value="externallyprovisioned"/>
|
|
<variable name="mqConsoleFrameAncestors" value="${env.MQ_HOSTS}"/>
|
|
<httpDispatcher enableWelcomePage="false" appOrContextRootMissingMessage='<script>document.location.href="/ibmmq/console";</script>' />
|
|
<include location="tls.xml"/>
|
|
</server>
|