Solution Hub
Group "Solution Hub"
This group defines settings related to accessing the Solution Hub.
In order to make the pull mode work, the Orchestra Server needs to be configured appropriately. All the relevant
configuration settings are found within the Solution Hub group within the orchestra monitor. The following configuration
properties are supported, whereby the url is mandatory for the pull mode. Orchestra supports two authentication
modes. The preferred way is the api.key which is a pre-shared secret that is used for generating dynamic session
keys. If the api.key is not present, the api.user and api.password settings are used to connect to solution. Please
ensure that the solution hub has the role Deployment.Remote.Pull assigned.
| Parameter | Description |
|---|---|
url | Defines the solution hub endpoint. (e.g. https://solution-hub:8473) |
api.pull.mode | Defines the behavior of the pulling mode. If STARTUP or INITIAL is chosen, the configuration is only synchronized once during the startup of the node. If INITIAL is set, a orchestra node is only synchronized if the node has no scenarios set. In case of STARUTP the synchronization is done on every startup. In case of FORCE or FULL, the synchronization is done permanently. If FORCE is set, orchestra tries its best to keep the configuration synchronized, local node changes are overwritten. If FULL is set, orchestra tries its best to keep the configuration synchronized, local node changes are preserved until a new operation is planned by the solution hub user. |
api.user | Defines the name of the user that should be used as login credential to the solution hub. This setting is taken if no api.key is present. |
api.password | Defines the password of the user that should be used for the to the solution hub. This setting is taken if no api.key is present. |
api.key | Defines the API key. The API key is a secret that is used for authentication of the orchestra node against the solution hub. |
api.key.expiryTime | Defines the expiry time of an api token. Api tokens that are expired will be rejected by the solution hub. A smaller value is recommended. |
solution.polling | The polling interval for pulling the scenario from Solution Hub |
solution.event.DelayTime | Defines how often orchestra should report solution hub specific errors to the event system. If a value less ore equal to zero is given, every error will be reported. |
remote.http.connectTimeout | Defines the timeout that is used to connect to the remote peer. |
remote.http.readTimeout | Defines the timeout that is used to all socket read operations. |
remote.http.ciphers | Enforcing specific Cipher Suites to be used in TLS. The cipher suites are added as comma separated values. |
remote.http.checkValidity | If set, then check if the certificate in an certificate are expired. |
remote.http.checkCertChain | If set, check if the certificate chain is correctly signed (certificate n is signed by certfificate n + 1) |
remote.http.checkSignersAgainstTrustStore | If set, then check that the one certificate in the certificate chain (typically the last one) is contained in the trust store. |
remote.http.trustedServer | The name of an orchestra runtime credential which holds the certificate of the identity provider. This certificate will be used to verify the identity provider. |
remote.http.trustedSigner | The name of a orchestra runtime credential which holds the certificate of that was used to sign the certificate of the identity provider. This certificate will be used to verify the identity provider. |