-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feature/docs/281 add documentation on advanced installation and configuration #286
Feature/docs/281 add documentation on advanced installation and configuration #286
Conversation
…nced-installation-and-configuration
…nced-installation-and-configuration
Sigrid maintainability feedback✅ You wrote maintainable code and achieved your objective of 3.8 stars Show detailsSigrid compared your code against the baseline of 2024-12-12. 👍 What went well?
👎 What could be better?
📚 Remaining technical debt
View this system in Sigrid** to explore your technical debt ⭐️ Sigrid ratings
💬 Did you find this feedback helpful?We would like to know your thoughts to make Sigrid better. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Move the RBAC setup to a separate PR
docs/content/en/docs/installation-configuration/authentication.md
Outdated
Show resolved
Hide resolved
### Spinning up Authentik | ||
|
||
Instruction and docker-compose on how to bundle SOARCA with Authentik will come! | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Either point to a docker compose or provide one in deployment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I will add this in a different pull request for now. ok?
docs/content/en/docs/installation-configuration/authentication.md
Outdated
Show resolved
Hide resolved
{{< tabpane langEqualsHeader=false >}} | ||
{{< tab header="`.env`" lang="txt" >}} | ||
AUTH_ENABLED: true | ||
OIDC_ISSUER: "https://authentikuri/application/o/does-providing-for-soarca/" | ||
OIDC_CLIENT_ID: "WxUcBMGZdI7c0e5oYp6mYdEd64acpXSuWKh8zBH5" | ||
OIDC_SKIP_TLS_VERIFY: true | ||
{{< /tab >}} | ||
|
||
{{< tab header="`bash`" lang="bash" >}} | ||
export AUTH_ENABLED=true | ||
export OIDC_ISSUER="https://authentikuri:9443/application/o/does-providing-for-soarca/" | ||
export OIDC_CLIENT_ID="WxUcBMGZdI7c0e5oYp6mYdEd64acpXSuWKh8zBH5" | ||
export OIDC_SKIP_TLS_VERIFY=true | ||
{{< /tab >}} | ||
{{< /tabpane >}} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we could use this style of init which I like better then the one we use now:
see: https://docs.opencti.io/latest/deployment/installation/#configure-the-environment
(cat << EOF
OPENCTI_ADMIN_EMAIL=admin@opencti.io
OPENCTI_ADMIN_PASSWORD=ChangeMePlease
OPENCTI_ADMIN_TOKEN=$(cat /proc/sys/kernel/random/uuid)
OPENCTI_BASE_URL=http://localhost:8080
MINIO_ROOT_USER=$(cat /proc/sys/kernel/random/uuid)
MINIO_ROOT_PASSWORD=$(cat /proc/sys/kernel/random/uuid)
RABBITMQ_DEFAULT_USER=guest
RABBITMQ_DEFAULT_PASS=guest
ELASTIC_MEMORY_SIZE=4G
CONNECTOR_HISTORY_ID=$(cat /proc/sys/kernel/random/uuid)
CONNECTOR_EXPORT_FILE_STIX_ID=$(cat /proc/sys/kernel/random/uuid)
CONNECTOR_EXPORT_FILE_CSV_ID=$(cat /proc/sys/kernel/random/uuid)
CONNECTOR_IMPORT_FILE_STIX_ID=$(cat /proc/sys/kernel/random/uuid)
CONNECTOR_EXPORT_FILE_TXT_ID=$(cat /proc/sys/kernel/random/uuid)
CONNECTOR_IMPORT_DOCUMENT_ID=$(cat /proc/sys/kernel/random/uuid)
SMTP_HOSTNAME=localhost
EOF
) > .env
and
export $(cat .env | grep -v "#" | xargs)
docs/content/en/docs/installation-configuration/authentication.md
Outdated
Show resolved
Hide resolved
…-advanced-installation-and-configuration
@@ -12,7 +12,7 @@ resources: | |||
SOARCA is build on top of the [CACAO Security Playbook Version 2.0](https://docs.oasis-open.org/cacao/security-playbooks/v2.0/cs01/security-playbooks-v2.0-cs01.html) standard. | |||
|
|||
{{% alert title="Warning" color="warning" %}} | |||
SOARCA v1.0 only implements a part of the CACAO v2 spec. Only `start`, `end`, and `action` steps are supported at this time. | |||
SOARCA v1.0 only implements a part of the CACAO v2 spec. Only `start`, `end`, `action`, and `if/else` steps are supported at this time. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is not correct
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@MaartendeKruijf what is correct then?
…-advanced-installation-and-configuration
No description provided.