Configuration Documentation

[alfonsoegio]

Please, document all the configuration management / files to configure ports / IPs (specially the 5GCity-AAA API url); integration documentation.

[rpreto]

Component dockerized and readme file updated

[alfonsoegio]

API_BASE_URL=http://206.189.7.202:8000 --build-arg AUTH_SERVER_URL=http://206.189.7.202:7070/auth

[alfonsoegio]

Can somebody explain what API_BASE_URL stands for? what's the difference with AUTH_SERVER_URL?

[rpreto]

As mentioned in the README:

To change Gravitee or Keycloak need to pass --build-arg to change Gravitee modify API_BASE_URL="http://XXX.XXX.X.XXX:8000 to modify Keycloak change AUTH_SERVER_URL="http://XXX.XXX.X.XXX:7070/auth"

[alfonsoegio]

OK, thanks, so API_BASE_URL would correspond to
Gravitee GW | 8000 | Host in AAA readme and keycloak to keycloak | 8080 | Host in the same document: https://github.com/5GCity/5GCity-AAA

[alfonsoegio]

OK, I've tried this, but now after running the 5gcity:latest container and browsing http://5gcity-slave1.i2cat.net:5000 I'm redirected to 8080 port with a 5GCITY page that complains "we're sorry ... https is required"; I can ask our system staff to ask for a TLS certificate, but again, where's the documentation about how to configure dashboard / keycloak etc ... to use it?

[ubiteixeira]

The https is not needed probably is something regarding the keycloak. Let me check

[ubiteixeira]

@alfonsoegio this problem is due to a keycloak configuration. By default and for security reasons keycloak uses https. I've added on the AAA project a new realm called master. Please import the realm with the command

python main.py keycloak --import_realm master

Have in mind that keycloak's import and export functionalities only work on the same host where the AAA is running. This command will overwrite your master realm and allow you to access keycloak.

Please import also the 5GCity realm with the SSL disabled

python main.py keycloak --import_realm 5gcity

[alfonsoegio]

OK, so this is an AAA issue ... I'll try the --import_realm master ... anyway, can we have documentation regarding how to setup real TLS certificates; this way we can have a proper setup from the beginning.