b599c7249d
The Zuul admin can configure authenticators with an optional "max_validity_time" field, which is the maximum age in seconds for a valid authentication token. By default there is no maximum age set for tokens, except the one deduced from the token's "exp" claim. If "max_validity" is set, tokens without an "iat" claim will be rejected. This is meant as an extra security to avoid accidentally issueing very long lived tokens through the CLI. The "skew" field can be used to mitigate clocks discrepancies between Zuul and a JWT emitter. Change-Id: I9351ca016b60050b5f3b3950b840d5f719e919ce
33 lines
537 B
Plaintext
33 lines
537 B
Plaintext
[gearman]
|
|
server=127.0.0.1
|
|
|
|
[scheduler]
|
|
tenant_config=main.yaml
|
|
relative_priority=true
|
|
|
|
[merger]
|
|
git_dir=/tmp/zuul-test/merger-git
|
|
git_user_email=zuul@example.com
|
|
git_user_name=zuul
|
|
|
|
[executor]
|
|
git_dir=/tmp/zuul-test/executor-git
|
|
|
|
[connection gerrit]
|
|
driver=gerrit
|
|
server=review.example.com
|
|
user=jenkins
|
|
sshkey=fake_id_rsa_path
|
|
|
|
[web]
|
|
static_cache_expiry=1200
|
|
|
|
[auth zuul_operator]
|
|
driver=HS256
|
|
allow_authz_override=true
|
|
realm=zuul.example.com
|
|
client_id=zuul.example.com
|
|
issuer_id=zuul_operator
|
|
secret=NoDanaOnlyZuul
|
|
max_validity_time=5
|