conf.yaml 3.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104
  1. #
  2. # Licensed to the Apache Software Foundation (ASF) under one or more
  3. # contributor license agreements. See the NOTICE file distributed with
  4. # this work for additional information regarding copyright ownership.
  5. # The ASF licenses this file to You under the Apache License, Version 2.0
  6. # (the "License"); you may not use this file except in compliance with
  7. # the License. You may obtain a copy of the License at
  8. #
  9. # http://www.apache.org/licenses/LICENSE-2.0
  10. #
  11. # Unless required by applicable law or agreed to in writing, software
  12. # distributed under the License is distributed on an "AS IS" BASIS,
  13. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14. # See the License for the specific language governing permissions and
  15. # limitations under the License.
  16. #
  17. conf:
  18. listen:
  19. host: 0.0.0.0 # `manager api` listening ip or host name
  20. port: 9000 # `manager api` listening port
  21. allow_list: # If we don't set any IP list, then any IP access is allowed by default.
  22. - 0.0.0.0/0
  23. etcd:
  24. endpoints: # supports defining multiple etcd host addresses for an etcd cluster
  25. - "http://etcd:2379"
  26. # yamllint disable rule:comments-indentation
  27. # etcd basic auth info
  28. # username: "root" # ignore etcd username if not enable etcd auth
  29. # password: "123456" # ignore etcd password if not enable etcd auth
  30. mtls:
  31. key_file: "" # Path of your self-signed client side key
  32. cert_file: "" # Path of your self-signed client side cert
  33. ca_file: "" # Path of your self-signed ca cert, the CA is used to sign callers' certificates
  34. # prefix: /apisix # apisix config's prefix in etcd, /apisix by default
  35. log:
  36. error_log:
  37. level: warn # supports levels, lower to higher: debug, info, warn, error, panic, fatal
  38. file_path:
  39. logs/error.log # supports relative path, absolute path, standard output
  40. # such as: logs/error.log, /tmp/logs/error.log, /dev/stdout, /dev/stderr
  41. access_log:
  42. file_path:
  43. logs/access.log # supports relative path, absolute path, standard output
  44. # such as: logs/access.log, /tmp/logs/access.log, /dev/stdout, /dev/stderr
  45. # log example: 2020-12-09T16:38:09.039+0800 INFO filter/logging.go:46 /apisix/admin/routes/r1 {"status": 401, "host": "127.0.0.1:9000", "query": "asdfsafd=adf&a=a", "requestId": "3d50ecb8-758c-46d1-af5b-cd9d1c820156", "latency": 0, "remoteIP": "127.0.0.1", "method": "PUT", "errs": []}
  46. authentication:
  47. secret:
  48. secret # secret for jwt token generation.
  49. # NOTE: Highly recommended to modify this value to protect `manager api`.
  50. # if it's default value, when `manager api` start, it will generate a random string to replace it.
  51. expire_time: 3600 # jwt token expire time, in second
  52. users: # yamllint enable rule:comments-indentation
  53. - username: admin # username and password for login `manager api`
  54. password: admin
  55. - username: user
  56. password: user
  57. plugins: # plugin list (sorted in alphabetical order)
  58. - api-breaker
  59. - authz-keycloak
  60. - basic-auth
  61. - batch-requests
  62. - consumer-restriction
  63. - cors
  64. # - dubbo-proxy
  65. - echo
  66. # - error-log-logger
  67. # - example-plugin
  68. - fault-injection
  69. - grpc-transcode
  70. - hmac-auth
  71. - http-logger
  72. - ip-restriction
  73. - jwt-auth
  74. - kafka-logger
  75. - key-auth
  76. - limit-conn
  77. - limit-count
  78. - limit-req
  79. # - log-rotate
  80. # - node-status
  81. - openid-connect
  82. - prometheus
  83. - proxy-cache
  84. - proxy-mirror
  85. - proxy-rewrite
  86. - redirect
  87. - referer-restriction
  88. - request-id
  89. - request-validation
  90. - response-rewrite
  91. - serverless-post-function
  92. - serverless-pre-function
  93. # - skywalking
  94. - sls-logger
  95. - syslog
  96. - tcp-logger
  97. - udp-logger
  98. - uri-blocker
  99. - wolf-rbac
  100. - zipkin
  101. - server-info
  102. - traffic-split