Tiltconfig.yaml

# Create an empty `local/Tiltconfig.yaml` and copy over any other services and update as needed
# To run local development images for the tidepool services, uncomment the `image` and `hostPath`
# parameters, and update the `hostPath` if you've checked the repo out to a different location.

### Global Config Start ###
global:
  glooingress:
    enabled: true
    jwt:
      disabled: true
    extauth:
      enabled: false
  gateway:
    default:
      protocol: http
      host: localhost:31500
      domain: localhost
    proxy:
      name: gateway-proxy
      namespace: default
      targetPort: 0
  linkerdsupport:
    enabled: false
  ports:
    viz:
      stories: 8083
      typestories: 8082
  secret: # we provision these in Tiltfile directly with kubectl
    enabled: false
    templated: false
    generated: false
  kafka:
    connect:
      enabled: true
      tlsEnabled: false
      replicas: 1
      mongoConnectionUri: ${directory:/opt/kafka/external-configuration/connector-config:Scheme}://${directory:/opt/kafka/external-configuration/connector-config:Addresses}/?ssl=${directory:/opt/kafka/external-configuration/connector-config:Tls}
    passwordKeyName: password
### Global Config End ###

### Gateway Config Start ###
glooingress:
  enabled: true
  virtualServices:
    http:
      name: "internal"
      dnsNames: ["*"]
      port: "31500"
      options:
        cors:
          allowCredentials: true
          allowHeaders:
          - authorization
          - content-type
          - x-tidepool-session-token
          - x-tidepool-trace-request
          - x-tidepool-trace-session
          allowMethods:
          - GET
          - POST
          - PUT
          - PATCH
          - DELETE
          - OPTIONS
          allowOriginRegex:
          - .*
          exposeHeaders:
          - x-tidepool-session-token
          - x-tidepool-trace-request
          - x-tidepool-trace-session
          maxAge: 600s

apiServer:
  enable: false
### Gateway Config End ###

keycloak:
  enabled: true

### MongoDB Config Start ###
mongodb:
  enabled: false       # False to disable the helm-chart-defined mongo, as we deploy our own directly within the Tiltfile
  useExternal: true   # Set to true and update the global mongo config below if using an external mongo db

mongo:
  secret:
    data_:
      Scheme: "mongodb"
      Addresses: "192.168.65.2" # Default docker host IP for Mac and Windows. Change to 172.17.0.1 for Linux hosts
      Username: ""
      Password: ""
      Database: "admin"
      Tls: "false"
      OptParams: "directConnection=true"
### MongoDB Config End ###

### Carelink API Config Start ###carelink:
carelink:
  secret:
    enabled: false
    data_:
      CarelinkSalt: ""
### Carelink API Config End ###

### Dexcom API Config Start ###
dexcom:
  secret:
    enabled: false
    data_:
      ClientId: ""
      ClientSecret: ""
      StateSalt: ""
  configmap:
    enabled: true
    redirectURL: ""
    tokenURL: "https://sandbox-api.dexcom.com/v2/oauth2/token"
    authorizeURL: "https://sandbox-api.dexcom.com/v2/oauth2/login?prompt=login"
    clientURL: "https://sandbox-api.dexcom.com"
### Dexcom API Config End ###

### Kafka config start ###
kafka:
  configmap:
    enabled: true
    Brokers: "kafka-kafka-bootstrap:9092"
    RequireSSL: "false"
    TopicPrefix: "default-"
    Username: "kafka"
  podMonitor:
    enabled: false
### Kafka API Config End ###

### JWT Token Signing Keys Config Start ###
token-signing-key:
  secret:
    enabled: true
    data_:
      public: |
        -----BEGIN PUBLIC KEY-----
        MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4m4UpnQdXbPKBY6mm8Pf
        ThSd8FV7uMk+X5yBe3tfOjcAZVJEJGNGpaXI8xO2A9zQiAQr5dstSF/b2NdctLK9
        u9D7vcBJ+S5MMo7GiWROZmKLCRXYlKa9mQMls3ZsCyjwF83HaXYLHZo8idfij5vD
        e1XPPtbewQK5+m8HP7n8uF3qdXDTtXHAd+lI3faB8gMh56XnM3oP1bpe1M/zB88P
        tJGqyMzMlo4Hz3x9zVtlQqFQsgh0DCw6mzfKeJkRLYIxk42wfjM0QeuLBgRMZrIQ
        mtduvPR91jvoHw6ov2gyA68iLGL7Bh6BbLjbPQCH/5OzuTHVd3dOl/KaSSb1Wicm
        R1hYcAbr2TnBRp7I/pLdrdPaSC65xpZZnOaNoB5CKv2gSaxJpRrwJSnCIaw+qG9v
        gNlYdQxjEqdjryOOks/PJn0L5wiQespD6i7zTBeRRdwWBMnkgKgQVVUQt6rgLNQk
        J8oWeHmTjJANmAntFLeAyHsVGKB/3pWaFF+tWveUIrQKvvaHt0G2KrUBRhLJNcQR
        fKrvzvvT6w33tZAx75iOhkX1CbzrK/zRj0+fGoIu0PfRQXu2e8qRaiMmZiIHUZY/
        pTf/TSrCNO1wldByDVs5vwSVM8gvvR1MBic4hoMHkYOcb8GFq26Pi3HMyXE/fmKP
        itDtdf0AtwqBUC5R0ou7omkCAwEAAQ==
        -----END PUBLIC KEY-----
      private: |
        -----BEGIN RSA PRIVATE KEY-----
        MIIJKAIBAAKCAgEA4m4UpnQdXbPKBY6mm8PfThSd8FV7uMk+X5yBe3tfOjcAZVJE
        JGNGpaXI8xO2A9zQiAQr5dstSF/b2NdctLK9u9D7vcBJ+S5MMo7GiWROZmKLCRXY
        lKa9mQMls3ZsCyjwF83HaXYLHZo8idfij5vDe1XPPtbewQK5+m8HP7n8uF3qdXDT
        tXHAd+lI3faB8gMh56XnM3oP1bpe1M/zB88PtJGqyMzMlo4Hz3x9zVtlQqFQsgh0
        DCw6mzfKeJkRLYIxk42wfjM0QeuLBgRMZrIQmtduvPR91jvoHw6ov2gyA68iLGL7
        Bh6BbLjbPQCH/5OzuTHVd3dOl/KaSSb1WicmR1hYcAbr2TnBRp7I/pLdrdPaSC65
        xpZZnOaNoB5CKv2gSaxJpRrwJSnCIaw+qG9vgNlYdQxjEqdjryOOks/PJn0L5wiQ
        espD6i7zTBeRRdwWBMnkgKgQVVUQt6rgLNQkJ8oWeHmTjJANmAntFLeAyHsVGKB/
        3pWaFF+tWveUIrQKvvaHt0G2KrUBRhLJNcQRfKrvzvvT6w33tZAx75iOhkX1Cbzr
        K/zRj0+fGoIu0PfRQXu2e8qRaiMmZiIHUZY/pTf/TSrCNO1wldByDVs5vwSVM8gv
        vR1MBic4hoMHkYOcb8GFq26Pi3HMyXE/fmKPitDtdf0AtwqBUC5R0ou7omkCAwEA
        AQKCAgBppLSLyOcendCm8Rx41lVsh5/8ztVvrK0mTM34v+H5Nko/+7cBRzRh+syb
        5NlqSe8dVtzoXG9vMhJPxINjZ3WwmFur93hMAzbX69djqOIPUPDPp1qqWHVjW52O
        crUMK+iBIqhkYwfiouCV65ywJht5gtqz1eqOIOiGmKDIMc1gc6j9bEvKfy0uhTBT
        Jz0PnjiGbNhHIy8aJ98w6WjZftk0BTaqgyr9H30zaEEFvButj7gnqFwEheo+GzSj
        Ob9S/UiGMHhlGRzLmMr/XqgKzg+DPvpSvLutZbvyKZO/4ixbna2TCgdWnosCH+li
        N8o8CzyyLjcLiyWnLTCg6sVUb6mihULHOnAZL7KYcCuaU5+dO7l3vyNrnEVrmngZ
        2KaGwOXl2m+fMzjPT8xDyozzSKGfAdqgnntZ3tNI9h5cNYJ0tE0Axlv9GO+SDP3t
        RPO7KFwEjNqBElFgI62A3gBWpFyIgYagJf4TReYmLWWtpr+ubby7zcXhTprZTW+A
        TiEk4W+JDB2+OgYyqyePfkFRrKsZo2yHkD6yha/yJTzfiOtoipb4pYlJsy6puMpT
        HUaE/o7ZMCPzVnwVoMi3UBnHzqapLVTW5SqB4y2jl6KyfmUdobWcri9QIB2RAovj
        2fJq9UC7dFJGWjJ4Sey2R94S0pHFC60FxVLHiPSDsPq5RxtlBQKCAQEA8QRiNwdW
        I1GN6VXjSp5TCVL10ikgcNTIA1D5k0t3gyzVW1EICTxE5rOhsSSoHiNABOLihkyX
        XfC1FYx94D58YnLHwVs+mLb94iTJnKT45BRZ8m9yL8HcpgLkpuQAnSYPKrOU2lkK
        ++8iKJYovFDlSxFaWb/gZmw2w8lYzEzN4UVkesBYrnMpwbOtYFJQXhYulq9lXzji
        Ef5c97jUPuHa0I9qGdAWQpY856Ri1UatKvs8TQKZ6C2TmZ6V4JNf8SKwlQhU3lWZ
        J5Lh6ei6iWvhjvgDoBXTzbiEsvtPWar0XQ3yP3a0T/9b9SpikUjvA4XUumP+ZFeN
        YCcLiRc+zP30MwKCAQEA8IGNp8c2TpMVwrPhAlKNtWqIpqIoWMyKnAZJWk8gQZKN
        GpjwGT76OCjRSS8RPdMeDCE5zTGuJa5sA+IhXIRHsIG4kEzXWYoVvyF11sizYMjR
        9UdpTXYxthkdLFihjiFLYiZveecmNjp5O6LVRZ00AqKnSkcBCQIuA6IwBNZuQwxl
        lGlwCrSzw16nYBUf+JuU9GTBv7eFBm97EBaKpSSXP3MtJmR5esRAc8ActRbwU5kU
        kiGJ8CAa6jpPbJYUHlcWAjdgTJ0KtWbTh1/WcJaVH8mXcGmyZK9zjhodjVMpjpOk
        RXhoq0UKPDN73AAD1T/72cl2GmkByDDrl+v3pznS8wKCAQBcyBA7GOLrE8EquzqV
        hh93Lm2dauGnLfKVfD2nm1y1rbOwxJ/wVjg8C5jKRc9GUtGZT/JeOuvmaPx9ACmR
        At0FVSRa5hJR3dgcj4bhe4yo2MDLmGV/xwR3EBQPvyQRWw5ppNo/uBmHZMZkk3G5
        FPdAD70VYc00AKKQellpxINZHkqRCqzY81J21AGBXA6+OZHTxk+i+ZXl0WLeplNm
        pbGDqkHxD+8R0R4/GkRF0EBnlHHhP4gaHjl84NTXsEQ14uHRbXSmZpNf7aZ0UnhE
        4LfjPsy+esifoFHNSPuCDFKn4++GyN6fETHITnnFbis80u9SlZ3f6OhuxHknXEB7
        z6OLAoIBAQDR+io064aMf3omLWor3ut+Em8QHM9hB+OUaSCtyht9ZHfxWsl1ITjQ
        w0JFxOQmuCWprXCLp+5FU81Wbp116r+0aO08fvodYKOv5YS+ayfBPlOg9CIJ0UGB
        nNeNmiwirQrlvGzjX15LRi4GVRoi1ydLjbrE7M0IknCeF4IZFyXZP/+H3a5GipHP
        5tn21zq8kQkxfq5xtcZcYgRtfWC64gFzEhm/RUWSW7lx1a66pDZapnIBS2rkzQLy
        sMobIcSa4KmEcdiPyyRIUGgp7xCH59B2mkiviniH027uB/r5IjxMELcBOCkaLwLK
        oKBo6VJvYpd+A5grYrZ9k8h9MTVdOOzlAoIBAClv7pv/J5a3DMZMXjEUTXtkKBL2
        xRn8A4VU0a3LGhhsHEvSkgVxDDUBERuVw6vwz4hed0uyt93C3Nf7OANbh11fNezW
        vf0smbsXuCpM5GBCYWbYz/wwMZGZKg+Dj6WlHdgd6Ya42DHIzcxBUAulWyQN3Pu9
        ZRlhDDRNRjrzWEIfMxck1seAK5hmg2FP56myaMEoLRSlCv1UPJCa/VKEcaqxHhSA
        j8viOQ7CIs1Qq7Y57wO5BY2dPROkUwn5Xw1c/NYd1VqOoveLd3TLlqnBpe87L46z
        y1Pz28lSLP0oTOzBMz/XJiuoh+CV/EwPi37W/1uW+HCI3VNnrFi+7JB/qw4=
        -----END RSA PRIVATE KEY-----
### JWT Token Signing Keys Config End ###

### User Data Secret Config Start ###
userdata:
  secret:
    enabled: false
    data_:
      ServiceAuth: "This secret is used to encrypt the group id stored in the DB for gatekeeper"   # Replaces previously used TIDEPOOL_DOCKER_GATEKEEPER_SECRET env variable
      UserIdSalt: "This secret is used to salt the user id stored in the DB for highwater"         # Replaces previously used TIDEPOOL_DOCKER_HIGHWATER_SALT env variable
      PasswordSalt: "This secret is used to salt the user password stored in the DB for shoreline" # Replaces previously used TIDEPOOL_DOCKER_SHORELINE_SALT env variable
### User Data Secret Config Start ###

### Tidepool Services Config Start ###
auth:
  deployment:
    # image: tidepool-k8s-auth # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/platform      # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.auth'
  rebuildCommand: 'SERVICE=auth make service-build'

blip:
  deployment:
    # image: tidepool-k8s-blip # Uncomment to build and run local image or a specific remote image
  # hostPath: ../blip          # Uncomment to build and run local image
  containerPath: '/app'
  apiHost: 'http://localhost:31500'
  realmHost: 'http://localhost:32000'
  rollbarPostServerToken: '' # Rollbar post_server_item access token for posting source maps on production builds
  reactAppGAID: '' # Google Analytics 4 ID
  launchDarklyClientToken: '' # LaunchDarkly client token
  webpackDevTool: cheap-module-eval-source-map
  webpackDevToolViz: cheap-source-map # Suggest changing `cheap-source-map` to the slower, but far more helpful `source-map` if debugging errors in viz package files
  webpackPublicPath: 'http://localhost:31500/'
  linkedPackages:
    - name: viz
      packageName: '@tidepool/viz'
      hostPath: ../viz
      enabled: false

    - name: tideline
      packageName: tideline
      hostPath: ../tideline
      enabled: false

    - name: tidepool-platform-client
      packageName: tidepool-platform-client
      hostPath: ~/go/src/github.com/tidepool-org/platform-client
      enabled: false
  securityContext:
    allowPrivilegeEscalation: false
    runAsNonRoot: true
    runAsUser: 1000
    capabilities:
      drop:
      - ALL
  # i18nEnabled: 'true'                                       # Uncomment to enable internationalization UI
  # rxEnabled: 'true'                                         # Uncomment to enable prescriptions UI
  pendoEnabled: 'false'                                       # Set to `true` to enable pendo
  # disableDevTools: true                                     # Uncomment if working with large data sets is sluggish in development build
  # buildTarget: production                                   # Uncomment to run minified production builds
  # restartContainerCommand: './tilt/start.sh npm run server' # Uncomment if buildTarget = `production`

blob:
  deployment:
    # image: tidepool-k8s-blob # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/platform      # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.blob'
  rebuildCommand: 'SERVICE=blob make service-build'

clinic:
  deployment:
    replicas: 1
    # image: tidepool-k8s-clinic # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/clinic      # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/clinic'
  dockerFile: 'Dockerfile'
  buildTarget: development

clinic-worker:
  deployment:
    replicas: 1
    # image: tidepool-k8s-clinic-worker # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/clinic-worker      # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/clinic-worker'
  dockerFile: 'Dockerfile'
  rebuildCommand: 'make build'
  configmap:
    enabled: true
    data:
      KafkaTopicPrefix: "default."

data:
  deployment:
    # image: tidepool-k8s-data # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/platform      # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.data'
  rebuildCommand: 'SERVICE=data make service-build'

devices:
  deployment:
    replicas: 1
    # image: tidepool-k8s-devices                        # Uncomment to build and run local image or a specific remote image
  # hostPath: '~/go/src/github.com/tidepool-org/devices' # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/devices'
  buildTarget: release
  rebuildCommand: 'make generate && make build'

export:
  deployment:
    # image: tidepool-k8s-export # Uncomment to build and run local image or a specific remote image
  # hostPath: ../export          # Uncomment to build and run local image
  containerPath: '/app'

gatekeeper:
  deployment:
    # image: tidepool-k8s-gatekeeper # Uncomment to build and run local image or a specific remote image
  # hostPath: ../gatekeeper          # Uncomment to build and run local image
  containerPath: '/app'

highwater:
  deployment:
    # image: tidepool-k8s-highwater # Uncomment to build and run local image or a specific remote image
  # hostPath: ../highwater          # Uncomment to build and run local image
  containerPath: '/app'

hydrophone:
  deployment:
    env:
      clinicServiceEnabled: true
      useMockNotifier: true
    # image: tidepool-k8s-hydrophone # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/hydrophone          # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/hydrophone'
  rebuildCommand: './build.sh'

jellyfish:
  deployment:
    # image: tidepool-k8s-jellyfish # Uncomment to build and run local image or a specific remote image
  # hostPath: ../jellyfish          # Uncomment to build and run local image
  containerPath: '/app'
  configmap:
    enabled: true
    data:
      AuthRealm: dev
      AuthUrl: http://localhost:32000

mailer:
  deployment:
    replicas: 1
    env:
      backend: "console"
  #   image: tidepool-k8s-mailer
  # hostPath: ~/go/src/github.com/tidepool-org/mailer
  containerPath: '/go/src/github.com/tidepool-org/mailer'
  dockerFile: 'Dockerfile.development'

messageapi:
  deployment:
    # image: tidepool-k8s-message-api # Uncomment to build and run local image or a specific remote image
  # hostPath: ../message-api          # Uncomment to build and run local image
  containerPath: '/app'

migrations:
  deployment:
    # image: tidepool-k8s-migrations # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/platform            # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.migrations'
  rebuildCommand: 'SERVICE=migrations make service-build'

prescription:
  deployment:
    replicas: 1
    # image: tidepool-k8s-prescription                    # Uncomment to build and run local image or a specific remote image
  # hostPath: '~/go/src/github.com/tidepool-org/platform' # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.prescription'
  rebuildCommand: 'SERVICE=prescription make service-build'

seagull:
  deployment:
    # image: tidepool-k8s-seagull # Uncomment to build and run local image or a specific remote image
  # hostPath: ../seagull          # Uncomment to build and run local image
  containerPath: '/app'

shoreline:
  deployment:
    env:
      clinicServiceEnabled: true
    # image: tidepool-k8s-shoreline # Uncomment to build and run local image or a specific remote image
  # hostPath: ../shoreline          # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/shoreline'
  rebuildCommand: './build.sh'
  configmap:
    enabled: true
    data:
      ClinicDemoUserId: ""
      KeycloakAdminUsername: "admin"
      KeycloakBaseUrl: "http://keycloak-http.default.svc.cluster.local"
      KeycloakBackendClientId: "backend"
      KeycloakClientId: "shoreline"
      KeycloakRealm: "dev"
  secret:
    enabled: true
    data_:
      KeycloakClientSecret: "d06e8001-94f5-4054-8086-69feb7f90e77"
      KeycloakLongLivedClientSecret: "d06e8001-94f5-4054-8086-69feb7f90e77"
      KeycloakBackendClientSecret: "8f10ee82-f56f-44c3-854d-40ae4997f337"
      KeycloakAdminPassword: "admin"
      KeycloakMigrationSecret: "806a29b9-9ef0-47d4-8a0a-bdfdbb5f78d4"

task:
  deployment:
    # image: tidepool-k8s-task # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/platform      # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.task'
  rebuildCommand: 'SERVICE=task make service-build'

tidewhisperer:
  deployment:
    # image: tidepool-k8s-tide-whisperer # Uncomment to build and run local image or a specific remote image
  # hostPath: ../tide-whisperer          # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/tide-whisperer'
  rebuildCommand: './build.sh'

tools:
  deployment:
    # image: tidepool-k8s-tools # Uncomment to build and run local image or a specific remote image
  # hostPath: ~/go/src/github.com/tidepool-org/platform       # Uncomment to build and run local image
  containerPath: '/go/src/github.com/tidepool-org/platform'
  dockerFile: 'Dockerfile.tools'
  rebuildCommand: 'SERVICE=tools make service-build'

uploader:
  deployment:
    replicas: 1
    # image: tidepool-k8s-uploader # Uncomment to build and run local image or a specific remote image
  # hostPath: ../uploader          # Uncomment to build and run local image
  containerPath: '/app'
  apiUrl: 'http://localhost:31500'
  uploadUrl: 'http://localhost:31500'
  dataUrl: 'http://localhost:31500/dataservices'
  blipUrl: 'http://localhost:31500'
  realmHost: 'http://localhost:32000'
  rollbarPostServerToken: '' # Rollbar post_server_item access token for posting source maps on production builds
  webpackDevTool: cheap-module-eval-source-map
  webpackPublicPath: 'http://localhost:31500/uploader/'
  securityContext:
    allowPrivilegeEscalation: false
    runAsNonRoot: true
    runAsUser: 1000
    capabilities:
      drop:
      - ALL
  # i18nEnabled: 'true'                                       # Uncomment to enable internationalization UI
  # rxEnabled: 'true'                                         # Uncomment to enable prescriptions UI
  pendoEnabled: 'false'                                       # Set to `true` to enable pendo
  buildTarget: production
### Tidepool Services Config End ###