summaryrefslogtreecommitdiffstats
path: root/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env
diff options
context:
space:
mode:
authorRoger Zanoni <rzanoni@igalia.com>2023-12-28 23:10:34 +0000
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>2024-01-29 12:08:33 +0000
commitd5c1fb29dc1ae6f5d0dd6ddba1657a1feb1b9f62 (patch)
treebdc07eebb71bd1930df53db4781c6c0306fb4b3d /recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env
parent608d983bdfb90929689bd0eb31e4bc5ca11f8881 (diff)
Add a reverse proxy to enable grpc-web for webapps
This is needed because there's no browser api with enough control over http/2 requests, so we need a proxy that connects to the RPC backend and handle the communication between the app and service. The service is named "databroker-grpc-web-proxy.service" because each proxy instance connects to only one gRPC service, more services will be added to connect to other gRPC services. Bug-AGL: SPEC-4599 Signed-off-by: Roger Zanoni <rzanoni@igalia.com> Change-Id: I3b5bf6521dc0683639520626819c6a54be839e53 Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl-demo/+/29425 ci-image-build: Jenkins Job builder account ci-image-boot-test: Jenkins Job builder account Tested-by: Jenkins Job builder account Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Diffstat (limited to 'recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env')
-rw-r--r--recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env7
1 files changed, 7 insertions, 0 deletions
diff --git a/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env b/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env
new file mode 100644
index 000000000..1435253d3
--- /dev/null
+++ b/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env
@@ -0,0 +1,7 @@
+EXTRA_ARGS="--backend_addr=localhost:55555 \
+ --backend_client_tls_key_file=/etc/kuksa-val/Client.key \
+ --backend_client_tls_cert_file=/etc/kuksa-val/Client.pem \
+ --server_tls_key_file=/etc/kuksa-val/Server.key \
+ --server_tls_cert_file=/etc/kuksa-val/Server.pem \
+ --backend_tls_ca_files=/etc/kuksa-val/CA.pem --backend_tls=true \
+ --server_http_tls_port=8888 --run_tls_server=true --allowed_origins=true"