• Configuring Bacon
• Authentication
• PNC client HTTP timeouts

Configuring Bacon

An example configuration is present here

The default configuration used by bacon should be located in folder: ~/.config/pnc-bacon/ with name config.yaml. We can specify a different folder for the location of the config.yaml via the -p flag:

bacon pnc build cancel -p <alternate folder containing config.yaml> 1000

We can specify several profiles in the configuration file. This is useful when dealing with different PNC servers and/or configurations. We can use the --profile flag to choose the non-default one:

bacon pnc build cancel --profile coolProfile 1000

Authentication

To authenticate to PNC Authentication servers, add this to your config.yaml:

keycloak:
    url: "http://keycloak.com"
    realm: ""
    username: ""

    # if regular user
    clientId: ""

    # if service account
    # clientSecret: ""

We also support LDAP authentication as an alternative to keycloak if the PNC servers are configured to accept LDAP requests:

ldapUsernamePassword: username:password

PNC client HTTP timeouts

The PNC REST client used by bacon defaults to a 30 second connect timeout and a 60 second read timeout. Some operations can take longer than the read default to respond — for example generating redacted provenance during bacon pnc build download-build-outputs <id> --redacted — and will otherwise fail with java.net.SocketTimeoutException: Read timed out.

Both timeouts can be overridden without changing config.yaml. Each accepts a value in milliseconds and can be set via either a Java system property or an environment variable:

Precedence for each timeout is: system property first, then environment variable, then the built-in default. Values that are missing, blank, non-numeric, or not strictly positive are ignored (a warning is logged) and the default is used.

Set the read timeout to 5 minutes via an environment variable:

export PNC_CLIENT_READ_TIMEOUT_MILLIS=300000
bacon pnc build download-build-outputs <id> --redacted

Or via a system property (system properties reach bacon through JAVA_TOOL_OPTIONS):

JAVA_TOOL_OPTIONS="-Dpnc.client.readTimeoutMillis=300000" \
  bacon pnc build download-build-outputs <id> --redacted