This page contains information for new features, improvements, and fixes completed within Itential Automation Gateway 5.2 (IAG 5), as well as any other announcements or information that coincide as part of this release.
Introducing IAG 5.2
Itential Automation Gateway 5.2 enhances security and flexibility for network automation operations by introducing secrets injection capabilities alongside important security improvements.
What's New in IAG 5.2
Inject Secrets into Services
IAG 5.2 introduces the ability to securely inject sensitive information stored in IAG's secret store directly into your services as environment variables during execution. This enhancement streamlines credential management while maintaining security best practices for your automation workflows.
Key capabilities include:
- Flexible Secret Association: Associate secrets with services at creation time or during execution
- Environment Variable Injection: Seamlessly inject passwords, API tokens, AWS credentials, and other sensitive data as environment variables
- Decorator Support: Define secret requirements directly in your service decorators using custom annotations
- Platform Integration: Execute services with injected secrets through Gateway Manager's runService task
This feature eliminates the need to hardcode sensitive information in your automation scripts, reducing security risks and simplifying credential rotation across your automation environment.
For implementation guidance and detailed examples, see Inject Secrets into Services.
Security Improvements
ENG-13805: Resolved a potential path traversal security vulnerability detected by Snyk's code analysis.
Platform Compatibility
IAG 5.2 works with Gateway Manager to connect to Itential Platform, enabling IAG services to be used as tasks within Platform workflows. Services configured with secret injection can be executed through the runService task, bringing enterprise-grade secrets management to your automation workflows.
IAG 5 supports Itential Platform versions 6 and 2023.2.
Note: To use the secrets injection feature, you must be running IAG 5.2 or later with IAG's secret store configured. For information on configuring the secret store, see Configure IAG Secret Store.
For complete technical documentation and implementation guidance, see IAG 5.