Target Properties
Property Name | Property Code | Required | Description |
|---|---|---|---|
OPA Account |
| No | The OPA account includes essential properties such as the URL, Username, Password, and OAuth details for the OPA instance. You can manage the OPA account via the Integrations > Cloud page. See Configuring OPA Cloud Account for additional details. |
Inputs
Input Name | Input Code | Required | Description |
|---|---|---|---|
OPA Account |
| No | The OPA account with all the required properties like Base URI, Username and Password for running OPA Instance. |
Credential Map List |
| No | CSV list of credential folder/map names (for example Common). Leave blank to export every global credential map found in the workspace. |
Credentials Plan File |
| No | Optional input to specify a different credentials plan file name. Default ‘credentialsPlan.properties’. |
Additional Details
-
Writes
credentialsPlan.properties(or the name you specified) and copies it to the execution reports. - Format: {mapName}.{keyName}.{property}=value and mapName and keyName must not contain . (used as the key separator).
- Secrets are blank on export — set them before deploy (Use FlexDeploy encrypted properties where possible.)
- Delete any credential blocks you do not want FlexDeploy to manage at deploy time.
-
Filling secrets before deploy
- PASSWORD — set password (basic auth password for the credential).
- OAUTH — set secret (client secret, or a full base64 OAuth blob). An empty secret fails the deploy upsert.
- OCI_SIGNATURE_POLICY — set privateKey, and privateKeyPassPhrase if the key uses one. An empty privateKey fails the deploy upsert.
- privateKey: keep it on one line. This file is read line-by-line; do not paste a multi-line PEM. Prefer a FlexDeploy encrypted property over embedding the key in plain text.
-
Deploy behaviour
- On process application deploy, when a credentials plan is present, FlexDeploy upserts each listed global credential on the target workspace by mapName + keyName (create if missing, update if present), then verifies required credentials exist before continuing.