TA_AUTH_UI_DISABLED=false                                               # set to true to disable authentication on UI server.
TA_AUTH_LIBERTY_DISABLED=false                                          # set to true to disable authentication on Liberty server

TA_AUTH_OIDC_CLIENT_ID=sample-id                                        # OAuth2 Server client id
TA_AUTH_OIDC_CLIENT_SECRET=sample-secret                                # OAuth2 Server client secret

TA_AUTH_IDENTITY_REQUEST_ENDPOINT=https://account.example.com           # endpoint to request identity of the OAuth2 Server, no tailing /
TA_AUTH_IDENTITY_REQUEST_ENDPOINT_PATH=/api/oauth2/authorize            # path of the endpoint to request identity to OAuth2 Server, with heading /
TA_AUTH_IDENTITY_REQUEST_ENDPOINT_SCOPE=root_readonly                   # OAuth2 scope
TA_AUTH_CALLBACK_STATE_PREFIX_PADDING=                                  # some OAuth2 state requires minimum length, default to empty

TA_AUTH_TOKEN_REQUEST_ENDPOINT=https://api.example.com                  # endpoint to request token of the OAuth2 Server, no tailing /
TA_AUTH_TOKEN_REQUEST_ENDPOINT_PATH=/oauth2/token                       # path of the endpoint to request token of the OAuth2 Server, with heading /

TA_AUTH_TOKEN_VERIFICATION_ENDPOINT=https://api.example.com             # endpoint to verify tokens of the OAuth2 Server, no tailing /
TA_AUTH_TOKEN_VERIFICATION_ENDPOINT_PATH=/users/me                      # path to the endpoint to verify tokens of the OAuth2 Server, with heading /

TA_OCP_API_ENDPOINT=https://api.example.com                             # required only if the token revocation endpoint points to the default OAuth2 Server OpenShift Container Platform, no tailing /

TA_API_KEY=sample_B513VT1zlF56J9ZBjdambQQVM5_jePVN                      # required for authentication and TLS, keep it empty, will be generated if empty
TA_PRIVATE_KEY=base64-encoded-private-key                               # required for authentication and TLS, base 64 encoded private key, pem format, keep it empty, will be generated if empty
TA_PUBLIC_KEY=base64-encoded-public-key                                 # required for authentication and TLS, base 64 encoded private key, crt format, keep it empty, will be generated if empty
TA_AES_IV=                                                              # key length for aes256 is 128 bits around 16 characters, hex coded. keep it empty, will be generated if empty
TA_AES_KEY=                                                             # key length for aes256 is 256 bits around 32 characters, hex coded, keep it empty, will be generated if empty