diff options
| author |   Roger Zanoni <rzanoni@igalia.com> | 2023-12-28 23:10:34 +0000 |
|---|---|---|
| committer |   Jan-Simon Moeller <jsmoeller@linuxfoundation.org> | 2024-01-29 12:08:33 +0000 |
| commit | d5c1fb29dc1ae6f5d0dd6ddba1657a1feb1b9f62 (patch) | |
| tree | bdc07eebb71bd1930df53db4781c6c0306fb4b3d /recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env | |
| parent | 608d983bdfb90929689bd0eb31e4bc5ca11f8881 (diff) | |
Add a reverse proxy to enable grpc-web for webapps
This is needed because there's no browser api with enough control over http/2
requests, so we need a proxy that connects to the RPC backend and handle the
communication between the app and service.
The service is named "databroker-grpc-web-proxy.service" because each proxy
instance connects to only one gRPC service, more services will be added to
connect to other gRPC services.
Bug-AGL: SPEC-4599
Signed-off-by: Roger Zanoni <rzanoni@igalia.com>
Change-Id: I3b5bf6521dc0683639520626819c6a54be839e53
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl-demo/+/29425
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Tested-by: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Diffstat (limited to 'recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env')
| -rw-r--r-- | recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env b/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env new file mode 100644 index 00000000..1435253d --- /dev/null +++ b/recipes-wam/grpc-web-proxy/files/databroker-grpc-web-proxy.env @@ -0,0 +1,7 @@ +EXTRA_ARGS="--backend_addr=localhost:55555 \ + --backend_client_tls_key_file=/etc/kuksa-val/Client.key \ + --backend_client_tls_cert_file=/etc/kuksa-val/Client.pem \ + --server_tls_key_file=/etc/kuksa-val/Server.key \ + --server_tls_cert_file=/etc/kuksa-val/Server.pem \ + --backend_tls_ca_files=/etc/kuksa-val/CA.pem --backend_tls=true \ + --server_http_tls_port=8888 --run_tls_server=true --allowed_origins=true" |