Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 1 | # BMCWEB_KVM |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 2 | option( |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 3 | 'kvm', |
| 4 | type: 'feature', |
| 5 | value: 'enabled', |
| 6 | description: '''Enable the KVM host video WebSocket. Path is /kvm/0. |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 7 | Video is from the BMCs /dev/videodevice.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 8 | ) |
| 9 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 10 | # BMCWEB_TESTS |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 11 | option( |
| 12 | 'tests', |
| 13 | type: 'feature', |
| 14 | value: 'enabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 15 | description: 'Enable Unit tests for bmcweb', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 16 | ) |
| 17 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 18 | # BMCWEB_VM_WEBSOCKET |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 19 | option( |
| 20 | 'vm-websocket', |
| 21 | type: 'feature', |
| 22 | value: 'enabled', |
Ed Tanous | 36c0f2a | 2024-02-09 13:50:26 -0800 | [diff] [blame] | 23 | description: '''Enable the Virtual Media WebSocket. Path is /vm/0/0 and /nbd/<id> to |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 24 | open the websocket. See |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 25 | https://github.com/openbmc/jsnbd/blob/master/README.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 26 | ) |
Ed Tanous | efb8062 | 2021-02-20 11:04:01 -0800 | [diff] [blame] | 27 | |
Ed Tanous | 56b8199 | 2024-12-02 10:36:37 -0800 | [diff] [blame] | 28 | option( |
| 29 | 'redfish-use-3-digit-messageid', |
| 30 | type: 'feature', |
| 31 | value: 'disabled', |
| 32 | description: '''Prior to a bug fix, bmcweb exposed error messages with a |
| 33 | MessageId of Base.x.y.z.Message which was incorrect. |
| 34 | Enabling this option causes return codes to return the old |
| 35 | incorrect version for backward compatibility. Will be |
| 36 | removed Q2-2025''' |
| 37 | ) |
| 38 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 39 | # BMCWEB_NBDPROXY |
Ed Tanous | efb8062 | 2021-02-20 11:04:01 -0800 | [diff] [blame] | 40 | # if you use this option and are seeing this comment, please comment here: |
| 41 | # https://github.com/openbmc/bmcweb/issues/188 and put forward your intentions |
| 42 | # for this code. At this point, no daemon has been upstreamed that implements |
| 43 | # this interface, so for the moment this appears to be dead code; In leiu of |
| 44 | # removing it, it has been disabled to try to give those that use it the |
| 45 | # opportunity to upstream their backend implementation |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 46 | #option( |
| 47 | # 'vm-nbdproxy', |
Ed Tanous | 36c0f2a | 2024-02-09 13:50:26 -0800 | [diff] [blame] | 48 | # type: 'feature', |
| 49 | # value: 'disabled', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 50 | # description: 'Enable the Virtual Media WebSocket.' |
| 51 | #) |
| 52 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 53 | # BMCWEB_REST |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 54 | option( |
| 55 | 'rest', |
| 56 | type: 'feature', |
| 57 | value: 'disabled', |
| 58 | description: '''Enable Phosphor REST (D-Bus) APIs. Paths directly map |
| 59 | Phosphor D-Bus object paths, for example, |
| 60 | /xyz/openbmc_project/logging/entry/enumerate. See |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 61 | https://github.com/openbmc/docs/blob/master/rest-api.md.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 62 | ) |
| 63 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 64 | # BMCWEB_REDFISH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 65 | option( |
| 66 | 'redfish', |
| 67 | type: 'feature', |
| 68 | value: 'enabled', |
| 69 | description: '''Enable Redfish APIs. Paths are under /redfish/v1/. See |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 70 | https://github.com/openbmc/bmcweb/blob/master/DEVELOPING.md#redfish.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 71 | ) |
| 72 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 73 | # BMCWEB_HOST_SERIAL_SOCKET |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 74 | option( |
| 75 | 'host-serial-socket', |
| 76 | type: 'feature', |
| 77 | value: 'enabled', |
| 78 | description: '''Enable host serial console WebSocket. Path is /console0. |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 79 | See https://github.com/openbmc/docs/blob/master/console.md.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 80 | ) |
| 81 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 82 | # BMCWEB_STATIC_HOSTING |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 83 | option( |
| 84 | 'static-hosting', |
| 85 | type: 'feature', |
| 86 | value: 'enabled', |
| 87 | description: '''Enable serving files from the /usr/share/www directory |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 88 | as paths under /.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 89 | ) |
| 90 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 91 | # BMCWEB_REDFISH_BMC_JOURNAL |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 92 | option( |
| 93 | 'redfish-bmc-journal', |
| 94 | type: 'feature', |
Willy Tu | f848367 | 2022-05-10 15:08:10 -0700 | [diff] [blame] | 95 | value: 'enabled', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 96 | description: '''Enable BMC journal access through Redfish. Paths are under |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 97 | /redfish/v1/Managers/bmc/LogServices/Journal.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 98 | ) |
| 99 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 100 | # BMCWEB_REDFISH_CPU_LOG |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 101 | option( |
| 102 | 'redfish-cpu-log', |
| 103 | type: 'feature', |
| 104 | value: 'disabled', |
| 105 | description: '''Enable CPU log service transactions through Redfish. Paths |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 106 | are under /redfish/v1/Systems/system/LogServices/Crashdump'.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 107 | ) |
| 108 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 109 | # BMCWEB_REDFISH_DUMP_LOG |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 110 | option( |
| 111 | 'redfish-dump-log', |
| 112 | type: 'feature', |
| 113 | value: 'disabled', |
| 114 | description: '''Enable Dump log service transactions through Redfish. Paths |
| 115 | are under /redfish/v1/Systems/system/LogServices/Dump |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 116 | and /redfish/v1/Managers/bmc/LogServices/Dump''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 117 | ) |
| 118 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 119 | # BMCWEB_REDFISH_DBUS_LOG |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 120 | option( |
| 121 | 'redfish-dbus-log', |
| 122 | type: 'feature', |
| 123 | value: 'disabled', |
| 124 | description: '''Enable DBUS log service transactions through Redfish. Paths |
| 125 | are under |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 126 | /redfish/v1/Systems/system/LogServices/EventLog/Entries''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 127 | ) |
| 128 | |
Alexander Hansen | 6c58a03 | 2024-11-21 15:27:04 -0800 | [diff] [blame] | 129 | # BMCWEB_EXPERIMENTAL_REDFISH_DBUS_LOG_SUBSCRIPTION |
| 130 | option( |
| 131 | 'experimental-redfish-dbus-log-subscription', |
| 132 | type: 'feature', |
| 133 | value: 'disabled', |
| 134 | description: ''' |
| 135 | Allows EventService subscriptions when the redfish-dbus-log option is |
| 136 | enabled. |
| 137 | This option is currently non-functional, given Redfish requirements for |
| 138 | MessageId support in Events. |
| 139 | Option will be removed begining of Q2-2025. |
| 140 | Should not be enabled on any production systems. |
| 141 | ''', |
| 142 | ) |
| 143 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 144 | # BMCWEB_REDFISH_HOST_LOGGER |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 145 | option( |
| 146 | 'redfish-host-logger', |
| 147 | type: 'feature', |
| 148 | value: 'enabled', |
| 149 | description: '''Enable host log service transactions based on |
| 150 | phosphor-hostlogger through Redfish. Paths are under |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 151 | /redfish/v1/Systems/system/LogServices/HostLogger''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 152 | ) |
| 153 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 154 | # BMCWEB_REDFISH_PROVISIONING_FEATURE |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 155 | option( |
| 156 | 'redfish-provisioning-feature', |
| 157 | type: 'feature', |
| 158 | value: 'disabled', |
| 159 | description: '''Enable provisioning feature support in redfish. Paths are |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 160 | under /redfish/v1/Systems/system/''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 161 | ) |
| 162 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 163 | # BMCWEB_REDFISH_MANAGER_URI_NAME |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 164 | option( |
Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 165 | 'redfish-manager-uri-name', |
| 166 | type: 'string', |
| 167 | value: 'bmc', |
| 168 | description: '''The static Redfish Manager ID representing the BMC |
| 169 | instance. This option will appear in the Redfish tree at |
| 170 | /redfish/v1/Managers/<redfish-manager-uri-name>. |
| 171 | Defaults to \'bmc\' which resolves to |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 172 | /redfish/v1/Managers/bmc''', |
Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 173 | ) |
| 174 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 175 | # BMCWEB_REDFISH_SYSTEM_URI_NAME |
Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 176 | option( |
| 177 | 'redfish-system-uri-name', |
| 178 | type: 'string', |
| 179 | value: 'system', |
| 180 | description: '''The static Redfish System ID representing the host |
| 181 | instance. This option will appear in the Redfish tree at |
| 182 | /redfish/v1/Systems/<redfish-system-uri-name>. |
| 183 | Defaults to \'system\' which resolves to |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 184 | /redfish/v1/Systems/system''', |
Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 185 | ) |
| 186 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 187 | # BMCWEB_LOGGING_LEVEL |
Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 188 | option( |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 189 | 'bmcweb-logging', |
Myung Bae | 662aa6e | 2023-01-10 14:20:28 -0600 | [diff] [blame] | 190 | type: 'combo', |
Ed Tanous | 92e26be | 2024-08-21 13:39:14 -0700 | [diff] [blame] | 191 | choices: [ |
| 192 | 'disabled', |
| 193 | 'enabled', |
| 194 | 'debug', |
| 195 | 'info', |
| 196 | 'warning', |
| 197 | 'error', |
| 198 | 'critical', |
| 199 | ], |
Ed Tanous | 4d1db04 | 2024-02-16 13:08:34 -0800 | [diff] [blame] | 200 | value: 'error', |
Myung Bae | 662aa6e | 2023-01-10 14:20:28 -0600 | [diff] [blame] | 201 | description: '''Enable output the extended logging level. |
| 202 | - disabled: disable bmcweb log traces. |
| 203 | - enabled: treated as 'debug' |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 204 | - For the other logging level option, see DEVELOPING.md.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 205 | ) |
| 206 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 207 | # BMCWEB_BASIC_AUTH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 208 | option( |
| 209 | 'basic-auth', |
| 210 | type: 'feature', |
| 211 | value: 'enabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 212 | description: 'Enable basic authentication', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 213 | ) |
| 214 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 215 | # BMCWEB_SESSION_AUTH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 216 | option( |
| 217 | 'session-auth', |
| 218 | type: 'feature', |
| 219 | value: 'enabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 220 | description: 'Enable session authentication', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 221 | ) |
| 222 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 223 | # BMCWEB_XTOKEN_AUTH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 224 | option( |
| 225 | 'xtoken-auth', |
| 226 | type: 'feature', |
| 227 | value: 'enabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 228 | description: 'Enable xtoken authentication', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 229 | ) |
| 230 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 231 | # BMCWEB_COOKIE_AUTH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 232 | option( |
| 233 | 'cookie-auth', |
| 234 | type: 'feature', |
| 235 | value: 'enabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 236 | description: 'Enable cookie authentication', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 237 | ) |
| 238 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 239 | # BMCWEB_MUTUAL_TLS_AUTH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 240 | option( |
| 241 | 'mutual-tls-auth', |
| 242 | type: 'feature', |
| 243 | value: 'enabled', |
| 244 | description: '''Enables authenticating users through TLS client |
| 245 | certificates. The insecure-disable-ssl must be disabled for |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 246 | this option to take effect.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 247 | ) |
| 248 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 249 | # BMCWEB_MUTUAL_TLS_COMMON_NAME_PARSING_DEFAULT |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 250 | option( |
Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 251 | 'mutual-tls-common-name-parsing-default', |
Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 252 | type: 'combo', |
Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 253 | choices: ['CommonName', 'Whole', 'UserPrincipalName', 'Meta'], |
| 254 | description: ''' |
| 255 | Parses the Subject CN in the format used by |
Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 256 | Meta Inc (see mutual_tls_meta.cpp for details) |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 257 | ''', |
Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 258 | ) |
| 259 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 260 | # BMCWEB_META_TLS_COMMON_NAME_PARSING |
Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 261 | option( |
Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 262 | 'meta-tls-common-name-parsing', |
| 263 | type: 'feature', |
| 264 | description: ''' |
| 265 | Allows parsing the Subject CN TLS certificate in the format used by |
| 266 | Meta Inc (see mutual_tls_meta.cpp for details) |
| 267 | ''', |
| 268 | ) |
| 269 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 270 | # BMCWEB_IBM_MANAGEMENT_CONSOLE |
Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 271 | option( |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 272 | 'ibm-management-console', |
| 273 | type: 'feature', |
| 274 | value: 'disabled', |
| 275 | description: '''Enable the IBM management console specific functionality. |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 276 | Paths are under /ibm/v1/''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 277 | ) |
| 278 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 279 | # BMCWEB_GOOGLE_API |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 280 | option( |
| 281 | 'google-api', |
| 282 | type: 'feature', |
| 283 | value: 'disabled', |
| 284 | description: '''Enable the Google specific functionality. Paths are under |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 285 | /google/v1/''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 286 | ) |
| 287 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 288 | # BMCWEB_HTTP_BODY_LIMIT |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 289 | option( |
| 290 | 'http-body-limit', |
| 291 | type: 'integer', |
| 292 | min: 0, |
| 293 | max: 512, |
| 294 | value: 30, |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 295 | description: 'Specifies the http request body length limit', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 296 | ) |
| 297 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 298 | # BMCWEB_REDFISH_NEW_POWERSUBSYSTEM_THERMALSUBSYSTEM |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 299 | option( |
| 300 | 'redfish-new-powersubsystem-thermalsubsystem', |
| 301 | type: 'feature', |
Gunnar Mills | 8615915 | 2024-02-06 14:54:39 -0600 | [diff] [blame] | 302 | value: 'enabled', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 303 | description: '''Enable/disable the new PowerSubsystem, ThermalSubsystem, |
| 304 | and all children schemas. This includes displaying all |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 305 | sensors in the SensorCollection.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 306 | ) |
| 307 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 308 | # BMCWEB_REDFISH_ALLOW_DEPRECATED_POWER_THERMAL |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 309 | option( |
| 310 | 'redfish-allow-deprecated-power-thermal', |
| 311 | type: 'feature', |
| 312 | value: 'enabled', |
| 313 | description: '''Enable/disable the old Power / Thermal. The default |
Gunnar Mills | 8615915 | 2024-02-06 14:54:39 -0600 | [diff] [blame] | 314 | condition is allowing the old Power / Thermal. This |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 315 | will be disabled by default June 2024. ''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 316 | ) |
| 317 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 318 | # BMCWEB_REDFISH_OEM_MANAGER_FAN_DATA |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 319 | option( |
Gunnar Mills | 54dce7f | 2022-08-05 17:01:32 +0000 | [diff] [blame] | 320 | 'redfish-oem-manager-fan-data', |
| 321 | type: 'feature', |
| 322 | value: 'enabled', |
| 323 | description: '''Enables Redfish OEM fan data on the manager resource. |
| 324 | This includes PID and Stepwise controller data. See |
Myung Bae | 1d19d87 | 2024-09-10 09:42:32 -0400 | [diff] [blame] | 325 | OpenBMCManager schema for more detail.''', |
Gunnar Mills | 54dce7f | 2022-08-05 17:01:32 +0000 | [diff] [blame] | 326 | ) |
| 327 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 328 | # BMCWEB_REDFISH_UPDATESERVICE_USE_DBUS |
Gunnar Mills | 54dce7f | 2022-08-05 17:01:32 +0000 | [diff] [blame] | 329 | option( |
Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 330 | 'redfish-updateservice-use-dbus', |
| 331 | type: 'feature', |
Jagpal Singh Gill | 64fa916 | 2024-11-12 16:16:47 -0800 | [diff] [blame] | 332 | value: 'enabled', |
Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 333 | description: '''Enables xyz.openbmc_project.Software.Update D-Bus interface |
| 334 | to propagate UpdateService requests to the corresponding |
| 335 | updater daemons instead of moving files to /tmp/images dir. |
| 336 | This option is temporary, should not be enabled on any |
| 337 | production systems. The code will be moved to the normal |
| 338 | code update flow and the option will be removed at the end |
| 339 | of Q3 2024. |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 340 | ''', |
Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 341 | ) |
| 342 | |
Ed Tanous | 6a37140 | 2024-12-03 14:01:25 -0800 | [diff] [blame] | 343 | # BMCWEB_REDFISH_ALLOW_SIMPLE_UPDATE |
| 344 | option( |
| 345 | 'redfish-allow-simple-update', |
| 346 | type: 'feature', |
| 347 | value: 'disabled', |
| 348 | description: '''Enables Redfish UpdateService SimpleUpdate Action. Note |
| 349 | that at this time this option is non-functional. Redfish |
| 350 | recommends using MultiPartUpdate.''', |
| 351 | ) |
| 352 | |
| 353 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 354 | # BMCWEB_HTTPS_PORT |
Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 355 | option( |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 356 | 'https_port', |
| 357 | type: 'integer', |
| 358 | min: 1, |
| 359 | max: 65535, |
| 360 | value: 443, |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 361 | description: 'HTTPS Port number.', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 362 | ) |
Manojkiran Eda | af6298d | 2020-05-27 08:51:32 +0530 | [diff] [blame] | 363 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 364 | # BMCWEB_DNS_RESOLVER |
Carson Labrado | 7fb3356 | 2022-04-18 23:26:56 +0000 | [diff] [blame] | 365 | option( |
Ed Tanous | f8ca6d7 | 2022-06-28 12:12:03 -0700 | [diff] [blame] | 366 | 'dns-resolver', |
| 367 | type: 'combo', |
| 368 | choices: ['systemd-dbus', 'asio'], |
| 369 | value: 'systemd-dbus', |
| 370 | description: '''Sets which DNS resolver backend should be used. |
| 371 | systemd-dbus uses the Systemd ResolveHostname on dbus, but requires dbus |
| 372 | support. asio relies on boost::asio::tcp::resolver, but cannot resolve |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 373 | names when boost threading is disabled.''', |
Ed Tanous | f8ca6d7 | 2022-06-28 12:12:03 -0700 | [diff] [blame] | 374 | ) |
| 375 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 376 | # BMCWEB_REDFISH_AGGREGATION |
Ed Tanous | f8ca6d7 | 2022-06-28 12:12:03 -0700 | [diff] [blame] | 377 | option( |
Carson Labrado | 7fb3356 | 2022-04-18 23:26:56 +0000 | [diff] [blame] | 378 | 'redfish-aggregation', |
| 379 | type: 'feature', |
| 380 | value: 'disabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 381 | description: 'Allows this BMC to aggregate resources from satellite BMCs', |
Carson Labrado | 7fb3356 | 2022-04-18 23:26:56 +0000 | [diff] [blame] | 382 | ) |
| 383 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 384 | # BMCWEB_HYPERVISOR_COMPUTER_SYSTEM |
Ed Tanous | 7f3e84a | 2022-12-28 16:22:54 -0800 | [diff] [blame] | 385 | option( |
Gunnar Mills | 6889620 | 2024-08-21 11:34:20 -0500 | [diff] [blame] | 386 | 'hypervisor-computer-system', |
| 387 | type: 'feature', |
| 388 | value: 'disabled', |
| 389 | description: '''This puts a hypervisor computer system resource at |
| 390 | /redfish/v1/Systems/hypervisor. This system resource has children |
| 391 | resources such as EthernetInterfaces and ComputerSystem.Reset.''', |
| 392 | ) |
| 393 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 394 | # BMCWEB_EXPERIMENTAL_REDFISH_MULTI_COMPUTER_SYSTEM |
Gunnar Mills | 6889620 | 2024-08-21 11:34:20 -0500 | [diff] [blame] | 395 | option( |
Ed Tanous | 7f3e84a | 2022-12-28 16:22:54 -0800 | [diff] [blame] | 396 | 'experimental-redfish-multi-computer-system', |
| 397 | type: 'feature', |
| 398 | value: 'disabled', |
| 399 | description: '''This is a temporary option flag for staging the |
| 400 | ComputerSystemCollection transition to multi-host. It, as well as the code |
Gunnar Mills | 1f1fb4f | 2024-10-02 15:02:19 -0500 | [diff] [blame] | 401 | still beneath it will be removed on 3/1/2025. Do not enable in a |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 402 | production environment, or where API stability is required.''', |
Ed Tanous | 7f3e84a | 2022-12-28 16:22:54 -0800 | [diff] [blame] | 403 | ) |
| 404 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 405 | # BMCWEB_EXPERIMENTAL_HTTP2 |
Ed Tanous | fca2cbe | 2021-01-28 14:49:59 -0800 | [diff] [blame] | 406 | option( |
| 407 | 'experimental-http2', |
| 408 | type: 'feature', |
| 409 | value: 'disabled', |
| 410 | description: '''Enable HTTP/2 protocol support using nghttp2. Do not rely |
| 411 | on this option for any production systems. It may have |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 412 | behavior changes or be removed at any time.''', |
Ed Tanous | fca2cbe | 2021-01-28 14:49:59 -0800 | [diff] [blame] | 413 | ) |
| 414 | |
Manojkiran Eda | af6298d | 2020-05-27 08:51:32 +0530 | [diff] [blame] | 415 | # Insecure options. Every option that starts with a `insecure` flag should |
| 416 | # not be enabled by default for any platform, unless the author fully comprehends |
| 417 | # the implications of doing so.In general, enabling these options will cause security |
| 418 | # problems of varying degrees |
| 419 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 420 | # BMCWEB_INSECURE_DISABLE_CSRF |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 421 | option( |
| 422 | 'insecure-disable-csrf', |
| 423 | type: 'feature', |
| 424 | value: 'disabled', |
| 425 | description: '''Disable CSRF prevention checks.Should be set to false for |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 426 | production systems.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 427 | ) |
| 428 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 429 | # BMCWEB_INSECURE_DISABLE_SSL |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 430 | option( |
| 431 | 'insecure-disable-ssl', |
| 432 | type: 'feature', |
| 433 | value: 'disabled', |
| 434 | description: '''Disable SSL ports. Should be set to false for production |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 435 | systems.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 436 | ) |
| 437 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 438 | # BMCWEB_INSECURE_DISABLE_AUTH |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 439 | option( |
| 440 | 'insecure-disable-auth', |
| 441 | type: 'feature', |
| 442 | value: 'disabled', |
Nan Zhou | a43ea82 | 2022-05-27 00:42:44 +0000 | [diff] [blame] | 443 | description: '''Disable authentication and authoriztion on all ports. |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 444 | Should be set to false for production systems.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 445 | ) |
| 446 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 447 | # BMCWEB_INSECURE_IGNORE_CONTENT_TYPE |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 448 | option( |
Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 449 | 'insecure-ignore-content-type', |
| 450 | type: 'feature', |
Ed Tanous | db39802 | 2023-06-07 16:38:08 -0700 | [diff] [blame] | 451 | value: 'disabled', |
Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 452 | description: '''Allows parsing PUT/POST/PATCH content as JSON regardless |
| 453 | of the presence of the content-type header. Enabling this |
| 454 | conflicts with the input parsing guidelines, but may be |
| 455 | required to support old clients that may not set the |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 456 | Content-Type header on payloads.''', |
Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 457 | ) |
| 458 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 459 | # BMCWEB_INSECURE_PUSH_STYLE_NOTIFICATION |
Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 460 | option( |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 461 | 'insecure-push-style-notification', |
| 462 | type: 'feature', |
| 463 | value: 'disabled', |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 464 | description: 'Enable HTTP push style eventing feature', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 465 | ) |
| 466 | |
Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 467 | # BMCWEB_INSECURE_ENABLE_REDFISH_QUERY |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 468 | option( |
| 469 | 'insecure-enable-redfish-query', |
| 470 | type: 'feature', |
| 471 | value: 'disabled', |
| 472 | description: '''Enables Redfish expand query parameter. This feature is |
| 473 | experimental, and has not been tested against the full |
| 474 | limits of user-facing behavior. It is not recommended to |
| 475 | enable on production systems at this time. Other query |
Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 476 | parameters such as only are not controlled by this option.''', |
Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 477 | ) |