Add missing Itential Platform properties to template and docs - #370
Open
Madias2222 wants to merge 3 commits into
Open
Add missing Itential Platform properties to template and docs#370Madias2222 wants to merge 3 commits into
Madias2222 wants to merge 3 commits into
Conversation
Bring roles/platform/templates/6-properties.j2 and its defaults in sync with the platform's configProperties model: server ID strategy, task/event/ transformation worker tuning, Mongo idle pooling and inline TLS CA, Redis persist-queues/timeouts/keepalive and inline TLS ca/cert/key, Vault namespace/ connection timeout plus a new CyberArk CCP section, auth principal/relay-state TTLs, webserver inline cert/key contents and TLS version pinning, JSON log toggles, and an OpenTelemetry webserver metrics toggle. Updates docs/itential_platform_guide.md and roles/platform/CLAUDE.md accordingly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Madias2222
requested review from
Amunagala-itential,
Nick-Andreano,
kvelarde-itential and
steven-schattenberg-itential
August 19, 2026 14:16
kvelarde-itential
requested changes
Aug 19, 2026
… hashivault.yml Separates CyberArk CCP settings from Hashicorp Vault settings for clarity; Ansible auto-loads all files under defaults/main/ so no task/template changes are needed. Docs updated to reference the new file paths. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
…unconfigured Gate the whole HASHICORP VAULT CONNECTION block on platform_configure_vault and the whole CYBERARK CCP CONNECTION block on platform_secret_provider_name == CyberArkCcp, instead of only commenting out individual properties. Update docs to describe the behavior. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
| | Variable | Type | Description | Default Value | | ||
| | :------- | :--- | :---------- | :------------ | | ||
| | platform_configure_vault | Boolean | Flag to enable/disable configuring Vault in Itential Platform | `false` | | ||
| | platform_secret_provider_name | String | Name of the secrets provider. Required for CyberArk CCP (`CyberArkCcp`). Not required for Hashicorp Vault. | | |
Collaborator
There was a problem hiding this comment.
Can we move this to a new file - secret_provider.yml?
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bring roles/platform/templates/6-properties.j2 and its defaults in sync with the platform's configProperties model: server ID strategy, task/event/ transformation worker tuning, Mongo idle pooling and inline TLS CA, Redis persist-queues/timeouts/keepalive and inline TLS ca/cert/key, Vault namespace/ connection timeout plus a new CyberArk CCP section, auth principal/relay-state TTLs, webserver inline cert/key contents and TLS version pinning, JSON log toggles, and an OpenTelemetry webserver metrics toggle. Updates docs/itential_platform_guide.md and roles/platform/CLAUDE.md accordingly.