sandbox:
  enabled: true
supergraph:
  listen: "0.0.0.0:8080"
  introspection: true
  path: /graphql
  query_planning:
    cache:
      in_memory:
        limit: 1024
homepage:
  enabled: false
cors:
  allow_credentials: true
  policies:
    - match_origins:
        - "^http://localhost:[0-9]+$"
health_check:
  listen: "0.0.0.0:8080"
  enabled: true
headers:
  all:
    request:
      - propagate:
          matching: ".*"
      - remove:
          matching: ^x-datadog-.*$
include_subgraph_errors:
  all: true
override_subgraph_url:
  graphql-abacus: "https://qa-graphql-abacus.theorchard.io/graphql"
  graphql-account: "https://qa-graphql-account.theorchard.io/graphql"
  graphql-analytics: "https://qa-graphql-analytics.theorchard.io/graphql"
  graphql-audience: "https://qa-graphql-audience.theorchard.io/graphql"
  graphql-content-review: "https://qa-graphql-content-review.theorchard.io/graphql"
  graphql-collaborator: "https://qa-graphql-collaborator.theorchard.io/graphql"
  graphql-distribution: "https://qa-graphql-distribution.theorchard.io/graphql"
  graphql-knowledge: "https://qa-graphql-knowledge.theorchard.io/graphql"
  graphql-knowledge-search: "https://qa-graphql-knowledge-search.theorchard.io/graphql"
  graphql-neighbouring-rights: "https://qa-graphql-neighbouring-rights.theorchard.io/graphql"
  graphql-participant: "https://qa-graphql-participant.theorchard.io/graphql"
  graphql-product: "https://qa-graphql-product.theorchard.io/graphql"
  graphql-publishing: "https://qa-graphql-publishing.theorchard.io/graphql"
  graphql-sr-delivery: "https://qa-graphql-sr-delivery.theorchard.io/graphql"
  graphql-tax-payment: "https://qa-graphql-tax-payment.theorchard.io/graphql"
  graphql-user: "https://qa-graphql-user.theorchard.io/graphql"
telemetry:
  instrumentation:
    spans:
      mode: spec_compliant
  exporters:
    logging:
      stdout:
        enabled: true
        format: json
    tracing:
      common:
        resource:
          env: qa
          service.name: graphql-router
        service_name: graphql-router
      otlp:
        enabled: true
        protocol: http
        endpoint: "http://127.0.0.1:4318"

traffic_shaping:
  router:
    timeout: 65s
  all:
    timeout: 65s

plugins:
  experimental.expose_query_plan: true
  theorchard.require_apollo_client_name:
    enabled: true
  pde.auth_enforcement:
    enabled: true
    rules:
      jwt:
        invalid_jwt: Warning
        expired_jwt: Warning
        issuers:
          - "https://qalogin.theorchard.com/"
          - "https://qa-orchard.auth0.com/"
        audiences:
          - "https://qa-ows.theorchard.io"
          - "https://workstation.qaorch.com/api"
      malformed_auth: Warning
      missing_auth: Warning
      multiple_auth: Warning
      unknown_auth: Warning
      hmac:
        hmac_use: Warning
        recipient_mismatch: Warning