Gateway 5.2.0 feature announcement

Itential Gateway 5.2 enhances security and flexibility for network automation operations by introducing secrets injection capabilities alongside important security improvements.

What’s new in Gateway 5.2

Inject secrets into services

Gateway 5.2 introduces the ability to securely inject sensitive information stored in Gateway’s secret store directly into your services as environment variables during execution. This enhancement streamlines credential management while maintaining security best practices for your automation workflows.

Key capabilities include:

• Flexible secret association: Associate secrets with services at creation time or during execution
• Environment variable injection: Seamlessly inject passwords, API tokens, AWS credentials, and other sensitive data as environment variables
• Decorator support: Define secret requirements directly in your service decorators using custom annotations
• Platform integration: Execute services with injected secrets through Gateway Manager’s runService task

This feature eliminates the need to hardcode sensitive information in your automation scripts, reducing security risks and simplifying credential rotation across your automation environment.

For implementation guidance and detailed examples, see Inject secrets into services.

Security improvements

ENG-13805: Resolved a potential path traversal security vulnerability detected by Snyk’s code analysis.

Platform compatibility

Gateway 5.2 works with Gateway Manager to connect to Itential Platform, enabling gateway services to be used as tasks within Platform workflows. Services configured with secret injection can be executed through the runService task, bringing enterprise-grade secrets management to your automation workflows.

Gateway 5 supports Itential Platform versions 6 and 2023.2.