ITL.Platform.SubscriptionVending/.env.example at main · ITlusions/ITL.Platform.SubscriptionVending · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# Copy this file to .env and fill in the values.
# All variables use the VENDING_ prefix.

# ── Azure credentials ─────────────────────────────────────────────────────────
# Leave VENDING_AZURE_CLIENT_ID and VENDING_AZURE_CLIENT_SECRET empty to use
# Managed Identity (recommended in Azure-hosted environments).
VENDING_AZURE_TENANT_ID=<your-tenant-id>
VENDING_AZURE_CLIENT_ID=
VENDING_AZURE_CLIENT_SECRET=

# Root management group name (default: ITL)
VENDING_ROOT_MANAGEMENT_GROUP=ITL

# ── Tag-based management group mapping ───────────────────────────────────────
# JSON object mapping environment names to management group names.
# Supports unlimited custom environments — add any key/value pair you need.
# Override VENDING_ENVIRONMENT_MG_MAPPING with a JSON string to customise.
#
# Example with extra environments:
# VENDING_ENVIRONMENT_MG_MAPPING='{"production":"ITL-Production","staging":"ITL-Staging","development":"ITL-Development","sandbox":"ITL-Sandbox","acceptance":"ITL-Acceptance","test":"ITL-Test"}'
VENDING_ENVIRONMENT_MG_MAPPING='{
  "production": "ITL-Production",
  "staging": "ITL-Staging",
  "development": "ITL-Development",
  "sandbox": "ITL-Sandbox"
}'

# Default e-mail for budget alerts when the itl-owner tag is absent.
VENDING_DEFAULT_ALERT_EMAIL=

# ── Authorization service ─────────────────────────────────────────────────────
VENDING_AUTHORIZATION_SERVICE_URL=http://itl-authorization:8004

# ── Keycloak ─────────────────────────────────────────────────────────────────
VENDING_KEYCLOAK_URL=http://keycloak:8080
VENDING_KEYCLOAK_REALM=ITL

# ── Feature flags ─────────────────────────────────────────────────────────────
# Set to true to enable POST /webhook/test mock endpoint.
VENDING_MOCK_MODE=false

# ── RBAC — object IDs for initial role assignments on new subscriptions ───────
VENDING_PLATFORM_SPN_OBJECT_ID=
VENDING_OPS_GROUP_OBJECT_ID=
VENDING_SECURITY_GROUP_OBJECT_ID=
VENDING_FINOPS_GROUP_OBJECT_ID=

# ── Event Grid ───────────────────────────────────────────────────────────────
# SAS key used to validate incoming Event Grid deliveries.
VENDING_EVENT_GRID_SAS_KEY=
# Outbound notification topic endpoint. Leave empty to disable outbound events.
VENDING_EVENT_GRID_TOPIC_ENDPOINT=