Global deployment variables

This sections provides information on the global deployment variables, their purpose, and maps each variable to the services that use them.

Variable Description Services using this variable
JWT_SIGNING_KEY Key used to sign the platform JWT token and validate incoming platform JWT tokens across services.
  • Authorization Service - Generate and validate JWT
  • OpenSearch-client Service - Validate JWT
  • Tenant-Manager Service - Requests JWT issuance
PLATFORM_AGENT_SECRET Secret for wxa4z:platform:agent, used by the Authorization Service for agent authentication. Example:
{
    "id": "wxa4z:platform:agent",
    "name": "platform",
    "secret": <PLATFORM_AGENT_SECRET>
  }
  • Authorization Service
AGENTS Environment configuration list updated to include the platform agent.
  • Authorization Service
AUTHZ_ID (STS key) STS key configured in application.yaml. Example:
STS Configuration
Specifies the STS key and password
token:
  sts:
    key: AUTHZ_ID 
    secret: AUTHZ_SECRET : Same value is used by the authorization service as STS-SECRET
  • Token Exchange Service
  • Authorization Service
AUTHZ_SECRET (STS secret) STS secret used by the Token Exchange Service; must match the value used by the Authorization Service as STS-SECRET.
  • Token Exchange Service
  • Authorization Service