| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 1 | # BMCWEB_KVM | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 2 | option( | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 3 | 'kvm', | 
|  | 4 | type: 'feature', | 
|  | 5 | value: 'enabled', | 
|  | 6 | description: '''Enable the KVM host video WebSocket.  Path is /kvm/0. | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 7 | Video is from the BMCs /dev/videodevice.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 8 | ) | 
|  | 9 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 10 | # BMCWEB_TESTS | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 11 | option( | 
|  | 12 | 'tests', | 
|  | 13 | type: 'feature', | 
|  | 14 | value: 'enabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 15 | description: 'Enable Unit tests for bmcweb', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 16 | ) | 
|  | 17 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 18 | # BMCWEB_VM_WEBSOCKET | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 19 | option( | 
|  | 20 | 'vm-websocket', | 
|  | 21 | type: 'feature', | 
|  | 22 | value: 'enabled', | 
| Ed Tanous | 36c0f2a | 2024-02-09 13:50:26 -0800 | [diff] [blame] | 23 | description: '''Enable the Virtual Media WebSocket. Path is /vm/0/0 and /nbd/<id> to | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 24 | open the websocket. See | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 25 | https://github.com/openbmc/jsnbd/blob/master/README.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 26 | ) | 
| Ed Tanous | efb8062 | 2021-02-20 11:04:01 -0800 | [diff] [blame] | 27 |  | 
| Ed Tanous | 56b8199 | 2024-12-02 10:36:37 -0800 | [diff] [blame] | 28 | option( | 
|  | 29 | 'redfish-use-3-digit-messageid', | 
|  | 30 | type: 'feature', | 
|  | 31 | value: 'disabled', | 
|  | 32 | description: '''Prior to a bug fix, bmcweb exposed error messages with a | 
|  | 33 | MessageId of Base.x.y.z.Message which was incorrect. | 
|  | 34 | Enabling this option causes return codes to return the old | 
|  | 35 | incorrect version for backward compatibility.  Will be | 
| Ed Tanous | 04adfbc | 2024-12-27 10:55:20 -0800 | [diff] [blame] | 36 | removed Q2-2025''', | 
| Ed Tanous | 56b8199 | 2024-12-02 10:36:37 -0800 | [diff] [blame] | 37 | ) | 
|  | 38 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 39 | # BMCWEB_NBDPROXY | 
| Ed Tanous | efb8062 | 2021-02-20 11:04:01 -0800 | [diff] [blame] | 40 | # if you use this option and are seeing this comment, please comment here: | 
|  | 41 | # https://github.com/openbmc/bmcweb/issues/188 and put forward your intentions | 
|  | 42 | # for this code.  At this point, no daemon has been upstreamed that implements | 
|  | 43 | # this interface, so for the moment this appears to be dead code;  In leiu of | 
|  | 44 | # removing it, it has been disabled to try to give those that use it the | 
|  | 45 | # opportunity to upstream their backend implementation | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 46 | #option( | 
|  | 47 | #    'vm-nbdproxy', | 
| Ed Tanous | 36c0f2a | 2024-02-09 13:50:26 -0800 | [diff] [blame] | 48 | #    type: 'feature', | 
|  | 49 | #    value: 'disabled', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 50 | #    description: 'Enable the Virtual Media WebSocket.' | 
|  | 51 | #) | 
|  | 52 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 53 | # BMCWEB_REST | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 54 | option( | 
|  | 55 | 'rest', | 
|  | 56 | type: 'feature', | 
|  | 57 | value: 'disabled', | 
|  | 58 | description: '''Enable Phosphor REST (D-Bus) APIs. Paths directly map | 
|  | 59 | Phosphor D-Bus object paths, for example, | 
|  | 60 | /xyz/openbmc_project/logging/entry/enumerate. See | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 61 | https://github.com/openbmc/docs/blob/master/rest-api.md.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 62 | ) | 
|  | 63 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 64 | # BMCWEB_REDFISH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 65 | option( | 
|  | 66 | 'redfish', | 
|  | 67 | type: 'feature', | 
|  | 68 | value: 'enabled', | 
|  | 69 | description: '''Enable Redfish APIs.  Paths are under /redfish/v1/. See | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 70 | https://github.com/openbmc/bmcweb/blob/master/DEVELOPING.md#redfish.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 71 | ) | 
|  | 72 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 73 | # BMCWEB_HOST_SERIAL_SOCKET | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 74 | option( | 
|  | 75 | 'host-serial-socket', | 
|  | 76 | type: 'feature', | 
|  | 77 | value: 'enabled', | 
|  | 78 | description: '''Enable host serial console WebSocket. Path is /console0. | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 79 | See https://github.com/openbmc/docs/blob/master/console.md.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 80 | ) | 
|  | 81 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 82 | # BMCWEB_STATIC_HOSTING | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 83 | option( | 
|  | 84 | 'static-hosting', | 
|  | 85 | type: 'feature', | 
|  | 86 | value: 'enabled', | 
|  | 87 | description: '''Enable serving files from the /usr/share/www directory | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 88 | as paths under /.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 89 | ) | 
|  | 90 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 91 | # BMCWEB_REDFISH_BMC_JOURNAL | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 92 | option( | 
|  | 93 | 'redfish-bmc-journal', | 
|  | 94 | type: 'feature', | 
| Willy Tu | f848367 | 2022-05-10 15:08:10 -0700 | [diff] [blame] | 95 | value: 'enabled', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 96 | description: '''Enable BMC journal access through Redfish. Paths are under | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 97 | /redfish/v1/Managers/bmc/LogServices/Journal.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 98 | ) | 
|  | 99 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 100 | # BMCWEB_REDFISH_CPU_LOG | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 101 | option( | 
|  | 102 | 'redfish-cpu-log', | 
|  | 103 | type: 'feature', | 
|  | 104 | value: 'disabled', | 
|  | 105 | description: '''Enable CPU log service transactions through Redfish. Paths | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 106 | are under /redfish/v1/Systems/system/LogServices/Crashdump'.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 107 | ) | 
|  | 108 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 109 | # BMCWEB_REDFISH_DUMP_LOG | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 110 | option( | 
|  | 111 | 'redfish-dump-log', | 
|  | 112 | type: 'feature', | 
|  | 113 | value: 'disabled', | 
|  | 114 | description: '''Enable Dump log service transactions through Redfish. Paths | 
|  | 115 | are under /redfish/v1/Systems/system/LogServices/Dump | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 116 | and /redfish/v1/Managers/bmc/LogServices/Dump''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 117 | ) | 
|  | 118 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 119 | # BMCWEB_REDFISH_DBUS_LOG | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 120 | option( | 
|  | 121 | 'redfish-dbus-log', | 
|  | 122 | type: 'feature', | 
|  | 123 | value: 'disabled', | 
|  | 124 | description: '''Enable DBUS log service transactions through Redfish. Paths | 
|  | 125 | are under | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 126 | /redfish/v1/Systems/system/LogServices/EventLog/Entries''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 127 | ) | 
|  | 128 |  | 
| Alexander Hansen | 6c58a03 | 2024-11-21 15:27:04 -0800 | [diff] [blame] | 129 | # BMCWEB_EXPERIMENTAL_REDFISH_DBUS_LOG_SUBSCRIPTION | 
|  | 130 | option( | 
|  | 131 | 'experimental-redfish-dbus-log-subscription', | 
|  | 132 | type: 'feature', | 
|  | 133 | value: 'disabled', | 
|  | 134 | description: ''' | 
|  | 135 | Allows EventService subscriptions when the redfish-dbus-log option is | 
|  | 136 | enabled. | 
|  | 137 | This option is currently non-functional, given Redfish requirements for | 
|  | 138 | MessageId support in Events. | 
|  | 139 | Option will be removed begining of Q2-2025. | 
|  | 140 | Should not be enabled on any production systems. | 
|  | 141 | ''', | 
|  | 142 | ) | 
|  | 143 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 144 | # BMCWEB_REDFISH_HOST_LOGGER | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 145 | option( | 
|  | 146 | 'redfish-host-logger', | 
|  | 147 | type: 'feature', | 
|  | 148 | value: 'enabled', | 
|  | 149 | description: '''Enable host log service transactions based on | 
|  | 150 | phosphor-hostlogger through Redfish.  Paths are under | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 151 | /redfish/v1/Systems/system/LogServices/HostLogger''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 152 | ) | 
|  | 153 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 154 | # BMCWEB_REDFISH_PROVISIONING_FEATURE | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 155 | option( | 
|  | 156 | 'redfish-provisioning-feature', | 
|  | 157 | type: 'feature', | 
|  | 158 | value: 'disabled', | 
|  | 159 | description: '''Enable provisioning feature support in redfish. Paths are | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 160 | under /redfish/v1/Systems/system/''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 161 | ) | 
|  | 162 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 163 | # BMCWEB_REDFISH_MANAGER_URI_NAME | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 164 | option( | 
| Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 165 | 'redfish-manager-uri-name', | 
|  | 166 | type: 'string', | 
|  | 167 | value: 'bmc', | 
|  | 168 | description: '''The static Redfish Manager ID representing the BMC | 
|  | 169 | instance. This option will appear in the Redfish tree at | 
|  | 170 | /redfish/v1/Managers/<redfish-manager-uri-name>. | 
|  | 171 | Defaults to \'bmc\' which resolves to | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 172 | /redfish/v1/Managers/bmc''', | 
| Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 173 | ) | 
|  | 174 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 175 | # BMCWEB_REDFISH_SYSTEM_URI_NAME | 
| Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 176 | option( | 
|  | 177 | 'redfish-system-uri-name', | 
|  | 178 | type: 'string', | 
|  | 179 | value: 'system', | 
|  | 180 | description: '''The static Redfish System ID representing the host | 
|  | 181 | instance. This option will appear in the Redfish tree at | 
|  | 182 | /redfish/v1/Systems/<redfish-system-uri-name>. | 
|  | 183 | Defaults to \'system\' which resolves to | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 184 | /redfish/v1/Systems/system''', | 
| Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 185 | ) | 
|  | 186 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 187 | # BMCWEB_LOGGING_LEVEL | 
| Ed Tanous | 253f11b | 2024-05-16 09:38:31 -0700 | [diff] [blame] | 188 | option( | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 189 | 'bmcweb-logging', | 
| Myung Bae | 662aa6e | 2023-01-10 14:20:28 -0600 | [diff] [blame] | 190 | type: 'combo', | 
| Ed Tanous | 92e26be | 2024-08-21 13:39:14 -0700 | [diff] [blame] | 191 | choices: [ | 
|  | 192 | 'disabled', | 
|  | 193 | 'enabled', | 
|  | 194 | 'debug', | 
|  | 195 | 'info', | 
|  | 196 | 'warning', | 
|  | 197 | 'error', | 
|  | 198 | 'critical', | 
|  | 199 | ], | 
| Ed Tanous | 4d1db04 | 2024-02-16 13:08:34 -0800 | [diff] [blame] | 200 | value: 'error', | 
| Myung Bae | 662aa6e | 2023-01-10 14:20:28 -0600 | [diff] [blame] | 201 | description: '''Enable output the extended logging level. | 
|  | 202 | - disabled: disable bmcweb log traces. | 
|  | 203 | - enabled: treated as 'debug' | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 204 | - For the other logging level option, see DEVELOPING.md.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 205 | ) | 
|  | 206 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 207 | # BMCWEB_BASIC_AUTH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 208 | option( | 
|  | 209 | 'basic-auth', | 
|  | 210 | type: 'feature', | 
|  | 211 | value: 'enabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 212 | description: 'Enable basic authentication', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 213 | ) | 
|  | 214 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 215 | # BMCWEB_SESSION_AUTH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 216 | option( | 
|  | 217 | 'session-auth', | 
|  | 218 | type: 'feature', | 
|  | 219 | value: 'enabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 220 | description: 'Enable session authentication', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 221 | ) | 
|  | 222 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 223 | # BMCWEB_XTOKEN_AUTH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 224 | option( | 
|  | 225 | 'xtoken-auth', | 
|  | 226 | type: 'feature', | 
|  | 227 | value: 'enabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 228 | description: 'Enable xtoken authentication', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 229 | ) | 
|  | 230 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 231 | # BMCWEB_COOKIE_AUTH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 232 | option( | 
|  | 233 | 'cookie-auth', | 
|  | 234 | type: 'feature', | 
|  | 235 | value: 'enabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 236 | description: 'Enable cookie authentication', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 237 | ) | 
|  | 238 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 239 | # BMCWEB_MUTUAL_TLS_AUTH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 240 | option( | 
|  | 241 | 'mutual-tls-auth', | 
|  | 242 | type: 'feature', | 
|  | 243 | value: 'enabled', | 
|  | 244 | description: '''Enables authenticating users through TLS client | 
|  | 245 | certificates. The insecure-disable-ssl must be disabled for | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 246 | this option to take effect.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 247 | ) | 
|  | 248 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 249 | # BMCWEB_MUTUAL_TLS_COMMON_NAME_PARSING_DEFAULT | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 250 | option( | 
| Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 251 | 'mutual-tls-common-name-parsing-default', | 
| Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 252 | type: 'combo', | 
| Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 253 | choices: ['CommonName', 'Whole', 'UserPrincipalName', 'Meta'], | 
|  | 254 | description: ''' | 
|  | 255 | Parses the Subject CN in the format used by | 
| Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 256 | Meta Inc (see mutual_tls_meta.cpp for details) | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 257 | ''', | 
| Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 258 | ) | 
|  | 259 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 260 | # BMCWEB_META_TLS_COMMON_NAME_PARSING | 
| Marco Kawajiri | 0e373b5 | 2023-10-31 13:36:58 -0700 | [diff] [blame] | 261 | option( | 
| Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 262 | 'meta-tls-common-name-parsing', | 
|  | 263 | type: 'feature', | 
|  | 264 | description: ''' | 
|  | 265 | Allows parsing the Subject CN TLS certificate in the format used by | 
|  | 266 | Meta Inc (see mutual_tls_meta.cpp for details) | 
|  | 267 | ''', | 
|  | 268 | ) | 
|  | 269 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 270 | # BMCWEB_IBM_MANAGEMENT_CONSOLE | 
| Ed Tanous | 3ce3688 | 2024-06-09 10:58:16 -0700 | [diff] [blame] | 271 | option( | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 272 | 'ibm-management-console', | 
|  | 273 | type: 'feature', | 
|  | 274 | value: 'disabled', | 
|  | 275 | description: '''Enable the IBM management console specific functionality. | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 276 | Paths are under /ibm/v1/''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 277 | ) | 
|  | 278 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 279 | # BMCWEB_GOOGLE_API | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 280 | option( | 
|  | 281 | 'google-api', | 
|  | 282 | type: 'feature', | 
|  | 283 | value: 'disabled', | 
|  | 284 | description: '''Enable the Google specific functionality. Paths are under | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 285 | /google/v1/''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 286 | ) | 
|  | 287 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 288 | # BMCWEB_HTTP_BODY_LIMIT | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 289 | option( | 
|  | 290 | 'http-body-limit', | 
|  | 291 | type: 'integer', | 
|  | 292 | min: 0, | 
|  | 293 | max: 512, | 
|  | 294 | value: 30, | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 295 | description: 'Specifies the http request body length limit', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 296 | ) | 
|  | 297 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 298 | # BMCWEB_REDFISH_NEW_POWERSUBSYSTEM_THERMALSUBSYSTEM | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 299 | option( | 
|  | 300 | 'redfish-new-powersubsystem-thermalsubsystem', | 
|  | 301 | type: 'feature', | 
| Gunnar Mills | 8615915 | 2024-02-06 14:54:39 -0600 | [diff] [blame] | 302 | value: 'enabled', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 303 | description: '''Enable/disable the new PowerSubsystem, ThermalSubsystem, | 
|  | 304 | and all children schemas. This includes displaying all | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 305 | sensors in the SensorCollection.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 306 | ) | 
|  | 307 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 308 | # BMCWEB_REDFISH_ALLOW_DEPRECATED_POWER_THERMAL | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 309 | option( | 
|  | 310 | 'redfish-allow-deprecated-power-thermal', | 
|  | 311 | type: 'feature', | 
|  | 312 | value: 'enabled', | 
|  | 313 | description: '''Enable/disable the old Power / Thermal. The default | 
| Gunnar Mills | 8615915 | 2024-02-06 14:54:39 -0600 | [diff] [blame] | 314 | condition is allowing the old Power / Thermal. This | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 315 | will be disabled by default June 2024. ''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 316 | ) | 
|  | 317 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 318 | # BMCWEB_REDFISH_OEM_MANAGER_FAN_DATA | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 319 | option( | 
| Gunnar Mills | 54dce7f | 2022-08-05 17:01:32 +0000 | [diff] [blame] | 320 | 'redfish-oem-manager-fan-data', | 
|  | 321 | type: 'feature', | 
|  | 322 | value: 'enabled', | 
|  | 323 | description: '''Enables Redfish OEM fan data on the manager resource. | 
|  | 324 | This includes PID and Stepwise controller data. See | 
| Myung Bae | 1d19d87 | 2024-09-10 09:42:32 -0400 | [diff] [blame] | 325 | OpenBMCManager schema for more detail.''', | 
| Gunnar Mills | 54dce7f | 2022-08-05 17:01:32 +0000 | [diff] [blame] | 326 | ) | 
|  | 327 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 328 | # BMCWEB_REDFISH_UPDATESERVICE_USE_DBUS | 
| Gunnar Mills | 54dce7f | 2022-08-05 17:01:32 +0000 | [diff] [blame] | 329 | option( | 
| Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 330 | 'redfish-updateservice-use-dbus', | 
|  | 331 | type: 'feature', | 
| Jagpal Singh Gill | 64fa916 | 2024-11-12 16:16:47 -0800 | [diff] [blame] | 332 | value: 'enabled', | 
| Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 333 | description: '''Enables xyz.openbmc_project.Software.Update D-Bus interface | 
|  | 334 | to propagate UpdateService requests to the corresponding | 
|  | 335 | updater daemons instead of moving files to /tmp/images dir. | 
|  | 336 | This option is temporary, should not be enabled on any | 
|  | 337 | production systems. The code will be moved to the normal | 
|  | 338 | code update flow and the option will be removed at the end | 
|  | 339 | of Q3 2024. | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 340 | ''', | 
| Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 341 | ) | 
|  | 342 |  | 
| Ed Tanous | 6a37140 | 2024-12-03 14:01:25 -0800 | [diff] [blame] | 343 | # BMCWEB_REDFISH_ALLOW_SIMPLE_UPDATE | 
|  | 344 | option( | 
|  | 345 | 'redfish-allow-simple-update', | 
|  | 346 | type: 'feature', | 
|  | 347 | value: 'disabled', | 
|  | 348 | description: '''Enables Redfish UpdateService SimpleUpdate Action.  Note | 
|  | 349 | that at this time this option is non-functional.  Redfish | 
|  | 350 | recommends using MultiPartUpdate.''', | 
|  | 351 | ) | 
|  | 352 |  | 
|  | 353 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 354 | # BMCWEB_HTTPS_PORT | 
| Jagpal Singh Gill | 5785566 | 2024-04-17 10:44:27 -0700 | [diff] [blame] | 355 | option( | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 356 | 'https_port', | 
|  | 357 | type: 'integer', | 
|  | 358 | min: 1, | 
|  | 359 | max: 65535, | 
|  | 360 | value: 443, | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 361 | description: 'HTTPS Port number.', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 362 | ) | 
| Manojkiran Eda | af6298d | 2020-05-27 08:51:32 +0530 | [diff] [blame] | 363 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 364 | # BMCWEB_DNS_RESOLVER | 
| Carson Labrado | 7fb3356 | 2022-04-18 23:26:56 +0000 | [diff] [blame] | 365 | option( | 
| Ed Tanous | f8ca6d7 | 2022-06-28 12:12:03 -0700 | [diff] [blame] | 366 | 'dns-resolver', | 
|  | 367 | type: 'combo', | 
|  | 368 | choices: ['systemd-dbus', 'asio'], | 
|  | 369 | value: 'systemd-dbus', | 
|  | 370 | description: '''Sets which DNS resolver backend should be used. | 
|  | 371 | systemd-dbus uses the Systemd ResolveHostname on dbus, but requires dbus | 
|  | 372 | support.  asio relies on boost::asio::tcp::resolver, but cannot resolve | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 373 | names when boost threading is disabled.''', | 
| Ed Tanous | f8ca6d7 | 2022-06-28 12:12:03 -0700 | [diff] [blame] | 374 | ) | 
|  | 375 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 376 | # BMCWEB_REDFISH_AGGREGATION | 
| Ed Tanous | f8ca6d7 | 2022-06-28 12:12:03 -0700 | [diff] [blame] | 377 | option( | 
| Carson Labrado | 7fb3356 | 2022-04-18 23:26:56 +0000 | [diff] [blame] | 378 | 'redfish-aggregation', | 
|  | 379 | type: 'feature', | 
|  | 380 | value: 'disabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 381 | description: 'Allows this BMC to aggregate resources from satellite BMCs', | 
| Carson Labrado | 7fb3356 | 2022-04-18 23:26:56 +0000 | [diff] [blame] | 382 | ) | 
|  | 383 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 384 | # BMCWEB_HYPERVISOR_COMPUTER_SYSTEM | 
| Ed Tanous | 7f3e84a | 2022-12-28 16:22:54 -0800 | [diff] [blame] | 385 | option( | 
| Gunnar Mills | 6889620 | 2024-08-21 11:34:20 -0500 | [diff] [blame] | 386 | 'hypervisor-computer-system', | 
|  | 387 | type: 'feature', | 
|  | 388 | value: 'disabled', | 
|  | 389 | description: '''This puts a hypervisor computer system resource at | 
|  | 390 | /redfish/v1/Systems/hypervisor. This system resource has children | 
|  | 391 | resources such as EthernetInterfaces and ComputerSystem.Reset.''', | 
|  | 392 | ) | 
|  | 393 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 394 | # BMCWEB_EXPERIMENTAL_REDFISH_MULTI_COMPUTER_SYSTEM | 
| Gunnar Mills | 6889620 | 2024-08-21 11:34:20 -0500 | [diff] [blame] | 395 | option( | 
| Ed Tanous | 7f3e84a | 2022-12-28 16:22:54 -0800 | [diff] [blame] | 396 | 'experimental-redfish-multi-computer-system', | 
|  | 397 | type: 'feature', | 
|  | 398 | value: 'disabled', | 
|  | 399 | description: '''This is a temporary option flag for staging the | 
|  | 400 | ComputerSystemCollection transition to multi-host.  It, as well as the code | 
| Gunnar Mills | 1f1fb4f | 2024-10-02 15:02:19 -0500 | [diff] [blame] | 401 | still beneath it will be removed on 3/1/2025.  Do not enable in a | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 402 | production environment, or where API stability is required.''', | 
| Ed Tanous | 7f3e84a | 2022-12-28 16:22:54 -0800 | [diff] [blame] | 403 | ) | 
|  | 404 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 405 | # BMCWEB_EXPERIMENTAL_HTTP2 | 
| Ed Tanous | fca2cbe | 2021-01-28 14:49:59 -0800 | [diff] [blame] | 406 | option( | 
|  | 407 | 'experimental-http2', | 
|  | 408 | type: 'feature', | 
|  | 409 | value: 'disabled', | 
|  | 410 | description: '''Enable HTTP/2 protocol support using nghttp2.  Do not rely | 
|  | 411 | on this option for any production systems.  It may have | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 412 | behavior changes or be removed at any time.''', | 
| Ed Tanous | fca2cbe | 2021-01-28 14:49:59 -0800 | [diff] [blame] | 413 | ) | 
|  | 414 |  | 
| Manojkiran Eda | af6298d | 2020-05-27 08:51:32 +0530 | [diff] [blame] | 415 | # Insecure options. Every option that starts with a `insecure` flag should | 
|  | 416 | # not be enabled by default for any platform, unless the author fully comprehends | 
|  | 417 | # the implications of doing so.In general, enabling these options will cause security | 
|  | 418 | # problems of varying degrees | 
|  | 419 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 420 | # BMCWEB_INSECURE_DISABLE_CSRF | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 421 | option( | 
|  | 422 | 'insecure-disable-csrf', | 
|  | 423 | type: 'feature', | 
|  | 424 | value: 'disabled', | 
|  | 425 | description: '''Disable CSRF prevention checks.Should be set to false for | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 426 | production systems.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 427 | ) | 
|  | 428 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 429 | # BMCWEB_INSECURE_DISABLE_SSL | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 430 | option( | 
|  | 431 | 'insecure-disable-ssl', | 
|  | 432 | type: 'feature', | 
|  | 433 | value: 'disabled', | 
|  | 434 | description: '''Disable SSL ports. Should be set to false for production | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 435 | systems.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 436 | ) | 
|  | 437 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 438 | # BMCWEB_INSECURE_DISABLE_AUTH | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 439 | option( | 
|  | 440 | 'insecure-disable-auth', | 
|  | 441 | type: 'feature', | 
|  | 442 | value: 'disabled', | 
| Nan Zhou | a43ea82 | 2022-05-27 00:42:44 +0000 | [diff] [blame] | 443 | description: '''Disable authentication and authoriztion on all ports. | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 444 | Should be set to false for production systems.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 445 | ) | 
|  | 446 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 447 | # BMCWEB_INSECURE_IGNORE_CONTENT_TYPE | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 448 | option( | 
| Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 449 | 'insecure-ignore-content-type', | 
|  | 450 | type: 'feature', | 
| Ed Tanous | db39802 | 2023-06-07 16:38:08 -0700 | [diff] [blame] | 451 | value: 'disabled', | 
| Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 452 | description: '''Allows parsing PUT/POST/PATCH content as JSON regardless | 
|  | 453 | of the presence of the content-type header.  Enabling this | 
|  | 454 | conflicts with the input parsing guidelines, but may be | 
|  | 455 | required to support old clients that may not set the | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 456 | Content-Type header on payloads.''', | 
| Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 457 | ) | 
|  | 458 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 459 | # BMCWEB_INSECURE_PUSH_STYLE_NOTIFICATION | 
| Ed Tanous | 1aa0c2b | 2022-02-08 12:24:30 +0100 | [diff] [blame] | 460 | option( | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 461 | 'insecure-push-style-notification', | 
|  | 462 | type: 'feature', | 
|  | 463 | value: 'disabled', | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 464 | description: 'Enable HTTP push style eventing feature', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 465 | ) | 
|  | 466 |  | 
| Ed Tanous | c5bcf35 | 2024-09-25 16:41:10 -0700 | [diff] [blame] | 467 | # BMCWEB_INSECURE_ENABLE_REDFISH_QUERY | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 468 | option( | 
|  | 469 | 'insecure-enable-redfish-query', | 
|  | 470 | type: 'feature', | 
|  | 471 | value: 'disabled', | 
|  | 472 | description: '''Enables Redfish expand query parameter.  This feature is | 
|  | 473 | experimental, and has not been tested against the full | 
|  | 474 | limits of user-facing behavior.  It is not recommended to | 
|  | 475 | enable on production systems at this time.  Other query | 
| Ed Tanous | 50b3702 | 2024-06-25 13:00:04 -0700 | [diff] [blame] | 476 | parameters such as only are not controlled by this option.''', | 
| Ed Tanous | 0cd5f78 | 2022-04-26 16:09:09 -0700 | [diff] [blame] | 477 | ) |