Sample config. yaml

config. yaml

services:
  - name: controlplane
    url: https://api.example.net/controlplane
    credentials:
      oauth2:
        grant_type: client_credentials
        token_url: https://api.example.net/as/token.oauth2
        client_id: ca3a5293-588a
        include_jti_claim: true
        aws_kms:
          name: arn:aws:kms:eu-west-1:6864711111:key/7f2bf672-5829-412d
          algorithm: ECDSA_SHA_256
        aws_signing:
          service: kms
          environment_credentials:
            aws_default_region: eu-west-1
        scopes:
          - controlplane:read
        additional_claims:
          sub: ca3a5293-588a
          iss: ca3a5293-588a
          aud:
            - https://api.example.net/as/token.oauth2

labels:
  app: pdp-service
  region: eu-west-1
  environment: uat

discovery:
  decision: rules.discovery.config
  resource: /discovery/pdp-service.rego
  service: controlplane
  polling:
    min_delay_seconds: 60 # default value
    max_delay_seconds: 120 # default value