Skip to content

Configuration Files

A more convenient method of entering the parameters instead of using command line flags is to use a YAML file containing the relevant data. This YAML file can be used directly as an input file for the Provisioning CLI. However, this means that in most cases you will need 2 separate files:

  • The onboarding file from the IE Hub containing the activation parameters

  • An additional YAML file with user specific settings

To uses both files as input, use the onboarding file as the primary input and add the second file with the --values command line flag. Alternatively, all the settings can be set directly using the flag --set. All settings are stored in the cluster and are applied again when using upgrade.

If settings exist in both files, the onboarding file takes precedence over the YAML file.

To generate a file with the most relevant settings, use the template command. The output can then either be used in addition to the onboarding file as described above.

central-auth:
    keycloak:
        customerRealmAdmin:
            #
            # Email of the initial IEM Pro admin
            email: customer.admin@siemens.com
            #
            # first name of the initial IEM Pro admin
            firstName: customer
            #
            # last name of the initial IEM Pro admin
            lastName: admin
            #
            # username of the initial IEM Pro admin
            username: customer_admin
        initialUser:
            #
            # email of the initial keycloak user
            email: iem.user@siemens.com
            #
            # Enable creation of the initial IEM Pro user
            enabled: true
            #
            # first name of the initial keycloak user
            firstName: iem
            #
            # last name of the initial keycloak user
            lastName: user
            #
            # username of the initial keycloak user
            username: iem_user
global:
    #
    # Application Secret Key
    applicationSecretKey: secretkey
    #
    # Password for Customer Realm Admin
    customerAdminPassword: secretpassword
    #
    # Password for database user
    databaseUserPassword: secretpassword
    #
    # Hostname for accessing the IEM Pro
    hostname: hostname.example.com
    #
    # Password for IAM administrator - IMPORTANT: This flag is deprecated
    iamAdminPassword: secretpassword
    #
    # Password for IAM Auth Proxy
    iamAuthProxyClientSecret: secretpassword
    #
    # Client Secret for IAM SDK
    iamSdkClientSecret: secretkey
    #
    # Password for IEM Pro administrator
    iemAdminPassword: secretpassword
    #
    # sets the passwords of initial users as temporary
    temporaryPassword: false
output:
    #
    # Print out initial user passwords?
    printPasswords: true

Also, refer to the available command line flags and Helm parameters.