Class ManagerEnvKeys

java.lang.Object

com.cloudforge.core.manager.ManagerEnvKeys

public final class ManagerEnvKeys
extends Object

Canonical environment / system-property keys for CloudForge Manager.

Deploy adapters (CloudForgeManagerOidcIntegration, DatabaseSpec wiring) and the Manager runtime (Spring Boot or otherwise) share these names so DeploymentConfig → container env → process config stays one contract.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCOUNT_SECRET_KEY	AES key for SecretCipher's AesGcmSecretCipher (cross-account connections' external IDs) — absent means PlaintextSecretCipher (local dev only).
static final String	AUTH_MODE
static final String	AWS_DEFAULT_REGION
static final String	AWS_ENDPOINT_URL
static final String	BIND
static final String	DB_ENGINE
static final String	DB_HOST
static final String	DB_MODE
static final String	DB_NAME
static final String	DB_PASSWORD
static final String	DB_PORT
static final String	DB_REPLICA_HOST
static final String	DB_REPLICA_PORT
static final String	DB_USER
static final String	DEFAULT_OIDC_ADMIN_GROUP	The one real source for these two role-group defaults — every place that needs a fallback when cognitoAdminGroupName/cognitoUserGroupName aren't explicitly set (cloudforge-manager's own ManagerRuntimeConfiguration and CognitoUserManagementService; cloudforge-manager-deployment's CloudForgeManagerApplicationSpec, for alb-oidc specifically — application-oidc gets the real configured value from CloudForgeManagerOidcIntegration instead, see that class's javadoc) references these constants instead of its own copy of the literal strings.
static final String	DEFAULT_OIDC_MANAGER_GROUP
static final String	LICENSE_KEY	Matches ManagerRuntimeConfiguration.LicenseSeat's "stopgap" env-var path exactly (cloudforge-manager) — a deploy-time-supplied customer license key, delivered as a Secrets Manager-backed ECS Secret, never a literal value in the task definition.
static final String	LOCALSTACK_ENDPOINT
static final String	MINISTACK_ENDPOINT
static final String	OIDC_ADMIN_GROUP
static final String	OIDC_AUTHORIZATION_ENDPOINT
static final String	OIDC_CLIENT_ID
static final String	OIDC_CLIENT_SECRET
static final String	OIDC_EMAIL_CLAIM
static final String	OIDC_GROUPS_CLAIM
static final String	OIDC_ISSUER
static final String	OIDC_JWKS_URI
static final String	OIDC_MANAGER_GROUP
static final String	OIDC_REDIRECT_URL
static final String	OIDC_SCOPES
static final String	OIDC_TOKEN_ENDPOINT
static final String	OIDC_USERINFO_ENDPOINT
static final String	OIDC_USERNAME_CLAIM
static final String	PORT
static final String	PROP_AUTH_MODE
static final String	PROP_AWS_ENDPOINT_URL
static final String	PROP_AWS_REGION
static final String	PROP_BIND
static final String	PROP_DB_MODE
static final String	PROP_LOCALSTACK_ENDPOINT
static final String	PROP_MINISTACK_ENDPOINT
static final String	PROP_OIDC_REDIRECT_URL
static final String	PROP_PUBLIC_URL
static final String	PROP_TARGET	Spring property keys (application-local.properties).
static final String	PUBLIC_TLS_TRUSTED	"true"/"false" — whether THIS deployment's ALB HTTPS listener is wearing a publicly-trusted certificate (the imported-ARN or DNS-validated ACM paths in FargateRuntimeConfiguration) as opposed to the untrusted AWS Private CA fallback used when SSL is on but no domain/cert is configured, or absent entirely when SSL is off.
static final String	PUBLIC_URL
static final String	REDIS_AUTH_TOKEN
static final String	REDIS_HOST
static final String	REDIS_PORT
static final String	REDIS_TLS
static final String	SESSION_MODE	memory (default) or redis — see SessionStore's javadoc.
static final String	SETUP_TOKEN
static final int	SYNTH_SERVICE_DEFAULT_PORT	The sidecar's own listen port, and the port every hardcoded fallback URL above must agree with — SynthServiceMain's SYNTH_SERVICE_PORT env-var default, LocalStackTemplateAdapter's host.docker.internal override, and ApplicationSpec's health-check command example all reference this one constant instead of repeating the literal, so a future port change can't drift out of sync in one of them.
static final String	SYNTH_SERVICE_URL	Base URL of the cloudforge-synth-service sidecar (see ManagerSynthesisService, cloudforge-manager) — read directly by the sidecar HTTP client, not one of the CFC_MANAGER_*-prefixed keys, since it names the sidecar, not Manager itself.
static final String	TARGET
static final String	TRUST_ALB_OIDC_HEADERS
static final String	TRUST_PRINCIPAL_ARN	Overrides the trust-policy principal ManagerIdentityResolver would otherwise derive from Manager's own sts:GetCallerIdentity — for deployments that front Manager with a different role than the one its own AWS calls run as.
static final String	VERSION

Method Summary

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PORT

public static final String PORT

See Also:

• Constant Field Values

BIND

public static final String BIND

See Also:

• Constant Field Values

PUBLIC_URL

public static final String PUBLIC_URL

See Also:

• Constant Field Values

PUBLIC_TLS_TRUSTED

public static final String PUBLIC_TLS_TRUSTED

"true"/"false" — whether THIS deployment's ALB HTTPS listener is wearing a publicly-trusted certificate (the imported-ARN or DNS-validated ACM paths in FargateRuntimeConfiguration) as opposed to the untrusted AWS Private CA fallback used when SSL is on but no domain/cert is configured, or absent entirely when SSL is off. Set by ContainerFactory, computed the same way FargateRuntimeConfiguration itself decides which cert path to take — see that class for why Private CA certs can't answer "yes" here. Consumed by cloudforge-manager to decide whether embedding a real payment form (which requires the hosting page to be genuinely trusted) is safe on this installation, or whether to fall back to a redirect-based purchase flow instead.

See Also:

• Constant Field Values

TARGET

public static final String TARGET

See Also:

• Constant Field Values

SYNTH_SERVICE_URL

public static final String SYNTH_SERVICE_URL

Base URL of the cloudforge-synth-service sidecar (see ManagerSynthesisService, cloudforge-manager) — read directly by the sidecar HTTP client, not one of the CFC_MANAGER_*-prefixed keys, since it names the sidecar, not Manager itself. Unset on an AWS deploy (the code default, http://localhost:8090, is already correct there: Fargate's awsvpc networking shares one ENI/loopback across every container in a task). LocalStack's and MiniStack's own ECS emulation gives each task container a separate Docker network namespace instead of sharing one — a divergence from AWS's own networking model, not a configuration gap — so LocalStackTemplateAdapter/MiniStackTemplateAdapter set this explicitly to a host-reachable address for those two targets only.

See Also:

• Constant Field Values

SYNTH_SERVICE_DEFAULT_PORT

public static final int SYNTH_SERVICE_DEFAULT_PORT

The sidecar's own listen port, and the port every hardcoded fallback URL above must agree with — SynthServiceMain's SYNTH_SERVICE_PORT env-var default, LocalStackTemplateAdapter's host.docker.internal override, and ApplicationSpec's health-check command example all reference this one constant instead of repeating the literal, so a future port change can't drift out of sync in one of them.

See Also:

• Constant Field Values

AUTH_MODE

public static final String AUTH_MODE

See Also:

• Constant Field Values

DB_MODE

public static final String DB_MODE

See Also:

• Constant Field Values

VERSION

public static final String VERSION

See Also:

• Constant Field Values

SETUP_TOKEN

public static final String SETUP_TOKEN

See Also:

• Constant Field Values

TRUST_ALB_OIDC_HEADERS

public static final String TRUST_ALB_OIDC_HEADERS

See Also:

• Constant Field Values

OIDC_ISSUER

public static final String OIDC_ISSUER

See Also:

• Constant Field Values

OIDC_AUTHORIZATION_ENDPOINT

public static final String OIDC_AUTHORIZATION_ENDPOINT

See Also:

• Constant Field Values

OIDC_TOKEN_ENDPOINT

public static final String OIDC_TOKEN_ENDPOINT

See Also:

• Constant Field Values

OIDC_USERINFO_ENDPOINT

public static final String OIDC_USERINFO_ENDPOINT

See Also:

• Constant Field Values

OIDC_JWKS_URI

public static final String OIDC_JWKS_URI

See Also:

• Constant Field Values

OIDC_CLIENT_ID

public static final String OIDC_CLIENT_ID

See Also:

• Constant Field Values

OIDC_CLIENT_SECRET

public static final String OIDC_CLIENT_SECRET

See Also:

• Constant Field Values

OIDC_REDIRECT_URL

public static final String OIDC_REDIRECT_URL

See Also:

• Constant Field Values

OIDC_SCOPES

public static final String OIDC_SCOPES

See Also:

• Constant Field Values

OIDC_USERNAME_CLAIM

public static final String OIDC_USERNAME_CLAIM

See Also:

• Constant Field Values

OIDC_EMAIL_CLAIM

public static final String OIDC_EMAIL_CLAIM

See Also:

• Constant Field Values

OIDC_GROUPS_CLAIM

public static final String OIDC_GROUPS_CLAIM

See Also:

• Constant Field Values

OIDC_ADMIN_GROUP

public static final String OIDC_ADMIN_GROUP

See Also:

• Constant Field Values

OIDC_MANAGER_GROUP

public static final String OIDC_MANAGER_GROUP

See Also:

• Constant Field Values

DEFAULT_OIDC_ADMIN_GROUP

public static final String DEFAULT_OIDC_ADMIN_GROUP

The one real source for these two role-group defaults — every place that needs a fallback when cognitoAdminGroupName/cognitoUserGroupName aren't explicitly set (cloudforge-manager's own ManagerRuntimeConfiguration and CognitoUserManagementService; cloudforge-manager-deployment's CloudForgeManagerApplicationSpec, for alb-oidc specifically — application-oidc gets the real configured value from CloudForgeManagerOidcIntegration instead, see that class's javadoc) references these constants instead of its own copy of the literal strings. Three independent copies of "ManagerAdmins"/"ManagerUsers" already drifted once — one hardcoded "admin"/"manager"/"viewer" instead, which meant every Cognito-backend-listed user resolved to "viewer" regardless of real group membership — this is what prevents that class of bug from recurring a fourth time.

See Also:

• Constant Field Values

DEFAULT_OIDC_MANAGER_GROUP

public static final String DEFAULT_OIDC_MANAGER_GROUP

See Also:

• Constant Field Values

DB_HOST

public static final String DB_HOST

See Also:

• Constant Field Values

DB_PORT

public static final String DB_PORT

See Also:

• Constant Field Values

DB_NAME

public static final String DB_NAME

See Also:

• Constant Field Values

DB_USER

public static final String DB_USER

See Also:

• Constant Field Values

DB_ENGINE

public static final String DB_ENGINE

See Also:

• Constant Field Values

DB_PASSWORD

public static final String DB_PASSWORD

See Also:

• Constant Field Values

DB_REPLICA_HOST

public static final String DB_REPLICA_HOST

See Also:

• Constant Field Values

DB_REPLICA_PORT

public static final String DB_REPLICA_PORT

See Also:

• Constant Field Values

SESSION_MODE

public static final String SESSION_MODE

memory (default) or redis — see SessionStore's javadoc.

See Also:

• Constant Field Values

REDIS_HOST

public static final String REDIS_HOST

See Also:

• Constant Field Values

REDIS_PORT

public static final String REDIS_PORT

See Also:

• Constant Field Values

REDIS_AUTH_TOKEN

public static final String REDIS_AUTH_TOKEN

See Also:

• Constant Field Values

REDIS_TLS

public static final String REDIS_TLS

See Also:

• Constant Field Values

ACCOUNT_SECRET_KEY

public static final String ACCOUNT_SECRET_KEY

AES key for SecretCipher's AesGcmSecretCipher (cross-account connections' external IDs) — absent means PlaintextSecretCipher (local dev only). When Manager is deployed via CloudForge's own CDK pipeline, this is injected as an ECS Secret bound to a CDK-provisioned Secrets Manager entry, the same delivery mechanism DB_PASSWORD already uses — never a literal env-var value in the task definition.

See Also:

• Constant Field Values

TRUST_PRINCIPAL_ARN

public static final String TRUST_PRINCIPAL_ARN

Overrides the trust-policy principal ManagerIdentityResolver would otherwise derive from Manager's own sts:GetCallerIdentity — for deployments that front Manager with a different role than the one its own AWS calls run as.

See Also:

• Constant Field Values

LICENSE_KEY

public static final String LICENSE_KEY

Matches ManagerRuntimeConfiguration.LicenseSeat's "stopgap" env-var path exactly (cloudforge-manager) — a deploy-time-supplied customer license key, delivered as a Secrets Manager-backed ECS Secret, never a literal value in the task definition.

See Also:

• Constant Field Values

LOCALSTACK_ENDPOINT

public static final String LOCALSTACK_ENDPOINT

See Also:

• Constant Field Values

AWS_ENDPOINT_URL

public static final String AWS_ENDPOINT_URL

See Also:

• Constant Field Values

AWS_DEFAULT_REGION

public static final String AWS_DEFAULT_REGION

See Also:

• Constant Field Values

MINISTACK_ENDPOINT

public static final String MINISTACK_ENDPOINT

See Also:

• Constant Field Values

PROP_TARGET

public static final String PROP_TARGET

Spring property keys (application-local.properties).

See Also:

• Constant Field Values

PROP_AUTH_MODE

public static final String PROP_AUTH_MODE

See Also:

• Constant Field Values

PROP_PUBLIC_URL

public static final String PROP_PUBLIC_URL

See Also:

• Constant Field Values

PROP_BIND

public static final String PROP_BIND

See Also:

• Constant Field Values

PROP_DB_MODE

public static final String PROP_DB_MODE

See Also:

• Constant Field Values

PROP_LOCALSTACK_ENDPOINT

public static final String PROP_LOCALSTACK_ENDPOINT

See Also:

• Constant Field Values

PROP_MINISTACK_ENDPOINT

public static final String PROP_MINISTACK_ENDPOINT

See Also:

• Constant Field Values

PROP_OIDC_REDIRECT_URL

public static final String PROP_OIDC_REDIRECT_URL

See Also:

• Constant Field Values

PROP_AWS_ENDPOINT_URL

public static final String PROP_AWS_ENDPOINT_URL

See Also:

• Constant Field Values

PROP_AWS_REGION

public static final String PROP_AWS_REGION

See Also:

• Constant Field Values