45 lines
2.1 KiB
Smarty
45 lines
2.1 KiB
Smarty
<?xml version="1.0" encoding="UTF-8"?>
|
|
<server>
|
|
<featureManager>
|
|
<feature>openidConnectClient-1.0</feature>
|
|
<feature>ssl-1.0</feature>
|
|
</featureManager>
|
|
<enterpriseApplication id="com.ibm.mq.console">
|
|
<application-bnd>
|
|
<security-role name="MQWebAdmin">
|
|
<group name="MQWebUI" realm="defaultRealm"/>
|
|
{{- range $index, $element := .AdminUser}}
|
|
<user name="admin{{$index}}" access-id="{{.}}"/>
|
|
{{- end}}
|
|
</security-role>
|
|
</application-bnd>
|
|
</enterpriseApplication>
|
|
<enterpriseApplication id="com.ibm.mq.rest">
|
|
<application-bnd>
|
|
<security-role name="MQWebAdmin">
|
|
<group name="MQWebUI" realm="defaultRealm"/>
|
|
</security-role>
|
|
<security-role name="MQWebUser">
|
|
<group name="MQWebMessaging" realm="defaultRealm"/>
|
|
</security-role>
|
|
</application-bnd>
|
|
</enterpriseApplication>
|
|
<openidConnectClient id="mqclient"
|
|
clientId="${env.MQ_OIDC_CLIENT_ID}"
|
|
clientSecret="${env.MQ_OIDC_CLIENT_SECRET}"
|
|
authorizationEndpointUrl="${env.MQ_OIDC_AUTHORIZATION_ENDPOINT}"
|
|
tokenEndpointUrl="${env.MQ_OIDC_TOKEN_ENDPOINT}"
|
|
scope="openid profile email"
|
|
inboundPropagation="supported"
|
|
jwkEndpointUrl="${env.MQ_OIDC_JWK_ENDPOINT}"
|
|
signatureAlgorithm="RS256"
|
|
issuerIdentifier="${env.MQ_OIDC_ISSUER_IDENTIFIER}">
|
|
</openidConnectClient>
|
|
<variable name="httpHost" value="*"/>
|
|
<keyStore id="MQWebKeyStore" location="/run/tls/key.jks" type="JKS" password="password"/>
|
|
<keyStore id="MQWebTrustStore" location="/run/tls/trust.jks" type="JKS" password="password"/>
|
|
<ssl id="thisSSLConfig" clientAuthenticationSupported="true" keyStoreRef="MQWebKeyStore" trustStoreRef="MQWebTrustStore" sslProtocol="TLSv1.2" serverKeyAlias="default"/>
|
|
<sslDefault sslRef="thisSSLConfig"/>
|
|
<httpDispatcher enableWelcomePage="false" appOrContextRootMissingMessage='<script>document.location.href="/ibmmq/console";</script>' />
|
|
</server>
|