SIENTIAPDE-1973: Implement per-connector OPC client certificates and remove legacy read engine. This update overhauls certificate management, transitioning from a single platform certificate to individual client certificates defined in the slot configuration. The CertProvider now downloads certificates from MinIO based on certificate_id, applying dynamic security policies (mode, policy) from the slot. The legacy READ_ENGINE=legacy option and OpcManager have been entirely removed, standardizing on the ServerReader with strict slot v2 enforcement. Write command resolution (ServerConfigResolver) now consistently uses connectors joined with opc_certificates. The CERT_BUCKET environment variable is no longer used.
46 lines
1.1 KiB
Plaintext
46 lines
1.1 KiB
Plaintext
# Redis
|
|
REDIS_HOST="localhost"
|
|
REDIS_PORT="6379"
|
|
REDIS_USERNAME="redis_user"
|
|
REDIS_PASSWORD="redis_password"
|
|
|
|
# Pod
|
|
HOSTNAME="localhost"
|
|
POLL_INTERVAL="5"
|
|
LOG_LEVEL="DEBUG"
|
|
|
|
# Mongo DB
|
|
MONGODB_URL="localhost:27018"
|
|
MONGODB_USERNAME="mongo_user"
|
|
MONGODB_PASSWORD="mongo_password"
|
|
MONGODB_DATABASE="sientia"
|
|
|
|
# OPC Gateway
|
|
NATS_URL="nats://localhost:4222"
|
|
NATS_WRITE_SUBJECT="opc.write"
|
|
NATS_QUEUE="gateway-writers"
|
|
GRPC_ENABLED="false"
|
|
GRPC_PORT="50051"
|
|
CERT_CACHE_DIR="/tmp/opc-certs"
|
|
WRITE_TIMESTAMP="true"
|
|
WRITE_QUALITY="true"
|
|
WRITE_MIN_PAUSE_S="0.0"
|
|
IDLE_CONN_MAX_S="300.0"
|
|
|
|
# OPC Gateway - MinIO (client cert storage, read by GatewayRuntime/CertProvider)
|
|
MINIO_ENDPOINT="localhost:9000"
|
|
MINIO_ACCESS_KEY="minioadmin"
|
|
MINIO_SECRET_KEY="minioadmin"
|
|
MINIO_SECURE="false"
|
|
|
|
# OPC Gateway - Postgres (write_status updates, read by GatewayRuntime/DataSink
|
|
# via sientia_do.utils.connectors_config.build_postgres_config)
|
|
POSTGRES_HOST="localhost"
|
|
POSTGRES_PORT="5432"
|
|
POSTGRES_USER="sientia"
|
|
POSTGRES_PASSWORD="sientia"
|
|
POSTGRES_DBNAME="sientia"
|
|
POSTGRES_MIN_CONNECTIONS="5"
|
|
POSTGRES_MAX_CONNECTIONS="20"
|
|
|