Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion source/api/alert.rst
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@ The following alert attributes are populated at source:
default) then alerts must have an ``environment`` attribute that
is one of either ``Production`` or ``Development`` and it must
define a ``service`` attribute. For more information on configuring
or disabling this plugin see :ref:`plugin config`.
or disabling this plugin see :ref:`plugin settings`.

Attributes added when processing alerts
---------------------------------------
Expand Down
4 changes: 2 additions & 2 deletions source/api/reference.rst
Original file line number Diff line number Diff line change
Expand Up @@ -42,11 +42,11 @@ Input
+-----------------+----------+----------------------------------------------+
| ``environment`` | string | environment, used to namespace the resource |
+-----------------+----------+----------------------------------------------+
| ``severity`` | string | see :ref:`severity_table` table |
| ``severity`` | string | see :ref:`severity table` table |
+-----------------+----------+----------------------------------------------+
| ``correlate`` | list | list of related event names |
+-----------------+----------+----------------------------------------------+
| ``status`` | string | see :ref:`status_table` table |
| ``status`` | string | see :ref:`status table` table |
+-----------------+----------+----------------------------------------------+
| ``service`` | list | list of effected services |
+-----------------+----------+----------------------------------------------+
Expand Down
7 changes: 3 additions & 4 deletions source/authentication.rst
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,7 @@ Authentication
==============

By default, authentication is not enabled, however there are some features
that are :ref:`not available <watched_alerts>` unless users login such as
watching alerts.
that are not available unless users login such as watching alerts.

Alerta supports six main authentication strategies:

Expand Down Expand Up @@ -200,7 +199,7 @@ Refer to pysaml2 documentation and source code if you need additional options:
- https://pysaml2.readthedocs.io/en/latest/howto/config.html
- https://github.com/rohe/pysaml2/blob/master/src/saml2/config.py

Note: entityid and service provider endpoints are configured by default based on your BASE_URL value which is mandatory if you use SAML (see :ref:`general config`)
Note: entityid and service provider endpoints are configured by default based on your BASE_URL value which is mandatory if you use SAML (see :ref:`general settings`)

``ALLOWED_SAML2_GROUPS``

Expand Down Expand Up @@ -625,7 +624,7 @@ the command-line tool.
Keys can be easily generated from the Alerta web UI and can have any scopes
associated with them. They are valid for 1 year by default but this period
is configurable using ``API_KEY_EXPIRE_DAYS`` in the
:ref:`server configuration <api config>`.
:ref:`server configuration <apikey settings>`.

To use an API key in an API query you must put the key in either an
HTTP header or a query parameter.
Expand Down
2 changes: 1 addition & 1 deletion source/conf.py
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@
myst_heading_anchors = 3

templates_path = ['_templates']
exclude_patterns = ['Thumbs.db', '.DS_Store']
exclude_patterns = ['Thumbs.db', '.DS_Store', 'auth/*', 'examples/*', 'thrift/*', 'spelling_wordlist.txt']

# -- Options for HTML output -------------------------------------------------
# https://www.sphinx-doc.org/en/master/usage/configuration.html#options-for-html-output
Expand Down
84 changes: 44 additions & 40 deletions source/configuration.rst
Original file line number Diff line number Diff line change
Expand Up @@ -293,6 +293,7 @@ Auth Provider Settings
valid authentication providers are ``basic``, ``ldap``, ``github``, ``openid``, ``saml2``,
``azure``, ``cognito``, ``gitlab``, ``google``, ``keycloak``,
and ``cas`` (default is ``basic``)

.. note::
Any authentication provider that is `OpenID Connect compliant`_ is supported. Set the
``AUTH_PROVIDER`` to ``openid`` and configure the required ``OIDC`` settings
Expand Down Expand Up @@ -432,13 +433,13 @@ SAML 2.0 Auth Settings
(no default)
``SAML2_USER_NAME_FORMAT``
Python format string which will be rendered to user's name using SAML
attributes. See :ref:`saml2` (default is ``'{givenName} {surname}'``)
attributes. See :ref:`saml2_auth` (default is ``'{givenName} {surname}'``)
``SAML2_EMAIL_ATTRIBUTE``
(default is ``'emailAddress'``)
``SAML2_CONFIG``
``pysaml2`` configuration ``dict``. See :ref:`saml2` (no default)
``pysaml2`` configuration ``dict``. See :ref:`saml2_auth` (no default)
``ALLOWED_SAML2_GROUPS``
list of authorised groups a user must belong to. See :ref:`saml2` for
list of authorised groups a user must belong to. See :ref:`saml2_auth` for
details (default is ``*``)
``ALLOWED_EMAIL_DOMAINS``
authorised email domains when using email as login (default is ``*``)
Expand Down Expand Up @@ -892,6 +893,9 @@ The following settings are specific to the web UI and are not used by the server
to sort by newest use ``lastReceiveTime`` or oldest use ``-createTime``. minus means reverse (default is ``lastReceiveTime``)
``DEFAULT_FILTER``
default alert list filter as query filter (default is ``{'status':['open','ack']}``)
``CLIPBOARD_TEMPLATE``
Jinja2-style template for the copy-to-clipboard button on alerts. Alert attributes
are available as template variables eg. ``{{ resource }}: {{ event }}`` (default is empty string)
``DEFAULT_FONT``
default ``font-family``, ``font-size`` and ``font-weight`` (default is ``Sintony``, ``13px``, ``500``)
``ACTIONS``
Expand Down Expand Up @@ -1071,20 +1075,20 @@ General Settings
~~~~~~~~~~~~~~~~

:envvar:`DEBUG`
:ref:`see above <general config>`
:ref:`see above <general settings>`
:envvar:`BASE_URL`
:ref:`see above <general config>`
:ref:`see above <general settings>`
:envvar:`USE_PROXYFIX`
:ref:`see above <general config>`
:ref:`see above <general settings>`
:envvar:`SECRET_KEY`
:ref:`see above <general config>`
:ref:`see above <general settings>`

Database Settings
~~~~~~~~~~~~~~~~~

:envvar:`DATABASE_URL`
used by both :ref:`Postgres <Postgres connection strings>` and
:ref:`MongoDB <MongoDB connection strings>` for database connection strings
used by both Postgres and MongoDB for database connection strings.
See :ref:`database settings`
:envvar:`DATABASE_NAME`
database name can be used to override default database defined in ``DATABASE_URL``

Expand Down Expand Up @@ -1113,81 +1117,81 @@ Authentication Settings
~~~~~~~~~~~~~~~~~~~~~~~

:envvar:`AUTH_REQUIRED`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`AUTH_PROVIDER`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`ADMIN_USERS`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`SIGNUP_ENABLED`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`CUSTOMER_VIEWS`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`OAUTH2_CLIENT_ID`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`OAUTH2_CLIENT_SECRET`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`ALLOWED_EMAIL_DOMAINS`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`AZURE_TENANT`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`GITHUB_URL`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`ALLOWED_GITHUB_ORGS`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`GITLAB_URL`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`ALLOWED_GITLAB_GROUPS`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`KEYCLOAK_URL`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`KEYCLOAK_REALM`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`ALLOWED_KEYCLOAK_ROLES`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`LDAP_BIND_PASSWORD`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`OIDC_ISSUER_URL`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`
:envvar:`ALLOWED_OIDC_ROLES`
:ref:`see above <auth config>`
:ref:`see above <auth settings>`

Sundry Settings
~~~~~~~~~~~~~~~

:envvar:`CORS_ORIGINS`
:ref:`see above <cors config>`
:ref:`see above <CORS settings>`
:envvar:`MAIL_FROM`
:ref:`see above <email config>`
:ref:`see above <email settings>`
:envvar:`SMTP_PASSWORD`
:ref:`see above <email config>`
:ref:`see above <email settings>`
:envvar:`GOOGLE_TRACKING_ID`
:ref:`see above <webui config>`

Housekeeping Settings
~~~~~~~~~~~~~~~~~~~~~

:envvar:`DELETE_EXPIRED_AFTER`
:ref:`see above <housekeeping config>`
:ref:`see above <housekeeping settings>`
:envvar:`DELETE_INFO_AFTER`
:ref:`see above <housekeeping config>`
:ref:`see above <housekeeping settings>`

Plugin & Webhook Settings
~~~~~~~~~~~~~~~~~~~~~~~~~

:envvar:`PLUGINS`
:ref:`see above <plugin config>`
:ref:`see above <plugin settings>`
:envvar:`BLACKOUT_DURATION`
:ref:`see above <plugin config>`
:ref:`see above <plugin settings>`
:envvar:`NOTIFICATION_BLACKOUT`
:ref:`see above <plugin config>`
:ref:`see above <plugin settings>`
:envvar:`BLACKOUT_ACCEPT`
:ref:`see above <plugin config>`
:ref:`see above <plugin settings>`
:envvar:`ORIGIN_BLACKLIST`
:ref:`see above <plugin config>`
:ref:`see above <plugin settings>`
:envvar:`ALLOWED_ENVIRONMENTS`
:ref:`see above <plugin config>`
:ref:`see above <plugin settings>`
:envvar:`DEFAULT_ENVIRONMENT`
:ref:`see above <webhook config>`
:ref:`see above <webhook settings>`

Dynamic Settings
----------------
Expand Down
2 changes: 1 addition & 1 deletion source/conventions.md
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ could then become::

### Severity Levels

Agree on a subset of [severity levels](api/alert.rst#alert-severities) and
Agree on a subset of {ref}`severity levels <severity table>` and
be consistent with what they mean. For example, if severity levels are used
consistently then integrating with a paging or email system becomes easier.

Expand Down
Loading
Loading