# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.

# Settings for a secure cluster.
# Disabled by default for each of testing.
# Use only for security tests.

druid_auth_authenticator_basic_authorizerName=basic
druid_auth_authenticator_basic_initialAdminPassword=priest
druid_auth_authenticator_basic_initialInternalClientPassword=warlock
druid_auth_authenticator_basic_type=basic
druid_auth_authenticatorChain=["basic"]
druid_auth_authorizer_basic_type=basic
druid_auth_authorizers=["basic"]

druid_escalator_authorizerName=basic
druid_escalator_internalClientPassword=warlock
druid_escalator_internalClientUsername=druid_system
druid_escalator_type=basic
druid_server_https_crlPath=/tls/revocations.crl

# /tls is not currently present in integration-tests-ex containers, this will need to be generated using the scripts in
# integration-tests/docker/tls in the future.
# druid_client_https_certAlias=druid
# druid_client_https_keyManagerPassword=druid123
# druid_client_https_keyStorePassword=druid123
# druid_client_https_keyStorePath=/tls/server.p12
# druid_client_https_protocol=TLSv1.2
# druid_client_https_trustStoreAlgorithm=PKIX
# druid_client_https_trustStorePassword=druid123
# druid_client_https_trustStorePath=/tls/truststore.jks
# druid_enableTlsPort=true
# druid_server_http_allowedHttpMethods=["OPTIONS"]
# druid_server_https_certAlias=druid
# druid_server_https_keyManagerPassword=druid123
# druid_server_https_keyStorePassword=druid123
# druid_server_https_keyStorePath=/tls/server.p12
# druid_server_https_keyStoreType=PKCS12
# druid_server_https_requireClientCertificate=true
# druid_server_https_trustStoreAlgorithm=PKIX
# druid_server_https_trustStorePassword=druid123
# druid_server_https_trustStorePath=/tls/truststore.jks
# druid_server_https_validateHostnames=true