Specifies the full path to the certificate file used to establish a secure connection to Gateway Manager.
GATEWAY_CONNECT_CERTIFICATE_FILE
Section: connect
Key: certificate_file
/etc/gateway/certificates/gw-manager.pem
Enables or disables the connection to Gateway Manager.
GATEWAY_CONNECT_ENABLED
Section: connect
Key: enabled
true
Configures the hostname and port used to connect to Gateway Manager.
GATEWAY_CONNECT_HOSTS
Section: connect
Key: hosts
No default value provided
Determines whether the gateway verifies TLS certificates when it connects to Itential Platform. When set to true, the gateway skips TLS certificate verification. We strongly recommend enabling TLS certificate verification in production environments.
GATEWAY_CONNECT_INSECURE_TLS
Section: connect
Key: insecure_tls
false
Specifies the full path to the private key file that the gateway uses to connect to Gateway Manager.
GATEWAY_CONNECT_PRIVATE_KEY_FILE
Section: connect
Key: private_key_file
/etc/gateway/certificates/gw-manager-key.pem
The HTTP or HTTPS proxy server URL that IAG uses to connect to Gateway Manager. Use the format http://host:port or https://host:port. When you set this variable, IAG routes all Gateway Manager connections through the proxy using the HTTP CONNECT method for TLS tunneling. If you don’t set this variable, IAG falls back to standard system proxy environment variables (HTTPS_PROXY, https_proxy, HTTP_PROXY, http_proxy).
GATEWAY_CONNECT_PROXY_URL
Section: connect
Key: proxy_url
None. IAG falls back to system proxy environment variables if available.
The username for proxy authentication. Use this variable with GATEWAY_CONNECT_PROXY_PASSWORD. If you include credentials in the proxy URL (for example, http://user:pass@proxy:8080), those credentials take precedence over this setting.
GATEWAY_CONNECT_PROXY_USERNAME
Section: connect
Key: proxy_username
None
The password for proxy authentication. Use this variable with GATEWAY_CONNECT_PROXY_USERNAME. For security, store credentials in environment variables rather than configuration files. If you include credentials in the proxy URL, those credentials take precedence over this setting.
GATEWAY_CONNECT_PROXY_PASSWORD
Section: connect
Key: proxy_password
None
Enable this configuration variable when you have multiple all in one or core nodes for a particular GATEWAY_APPLICATION_CLUSTER_ID. When you enable High Availability (HA), the system runs in active/standby mode. One server connects to Gateway Manager while the others remain in standby mode. If the active node goes down, a standby node connects to Gateway Manager and begins serving requests.
GATEWAY_CONNECT_SERVER_HA_ENABLED
Section: connect
Key: server_ha_enabled
false
When you set GATEWAY_CONNECT_SERVER_HA_ENABLED to true, use this configuration variable to designate one node as the primary. When all nodes are online, this node takes the highest precedence and connects to Gateway Manager. Only one core HA node can connect to Gateway Manager at a time. If this node loses connection to Gateway Manager or the database, a standby node takes its place.
GATEWAY_CONNECT_SERVER_HA_IS_PRIMARY
Section: connect
Key: server_ha_is_primary
false