Configuration Examples

This page provides examples of complete, copy-pastable agent_config.yml files for common scenarios.

By System Type

LDAPS only (port 636)

bond_version: 2.10.1
ldap_config:
  enabled: true
  host: mvwks.net
  ldap_service_password:
    encrypted_value: [REDACTED]
  path_to_cert: /home/moveworks/agent/certs/cert.pem
  port: 636
  service_user: MVWKS\svc_moveworks
  use_ssl: true
moveworks_config:
  access_key: moveworks
  auth_url: https://agent.[MOVEWORKS DOMAIN].com/api/v1/auth
  config_url: https://agent.[MOVEWORKS DOMAIN].com/api/v1/config
  moveworks_access_secret:
    encrypted_value: [REDACTED]

LDAPS + Jira

bond_version: 2.10.1
ldap_config:
  enabled: true
  host: mvwks.net
  ldap_service_password:
    encrypted_value: [REDACTED]
  path_to_cert: /home/moveworks/agent/certs/cert.pem
  port: 636
  service_user: MVWKS\svc_moveworks
  use_ssl: true
moveworks_config:
  access_key: moveworks
  auth_url: https://agent.[MOVEWORKS DOMAIN].com/api/v1/auth
  config_url: https://agent.[MOVEWORKS DOMAIN].com/api/v1/config
  moveworks_access_secret:
    encrypted_value:[REDACTED]
rest_configs:
  JIRA:
    enabled: true
    header_decorators:
    - basic_auth:
        password:
          encrypted_value: [REDACTED]
        username: service-moveworks
    service: JIRA

LDAP Forest with 2 Trees + Single REST with Basic Auth

bond_version: 2.10.3
moveworks_config: 
    access_key: banner 
    auth_url: [https://agents.moveworks.com/api/v1/auth](https://agents.moveworks.com/api/v1/auth) 
    config_url: [https://agents.moveworks.com/api/v1/config](https://agents.moveworks.com/api/v1/config)    
    moveworks_access_secret: 
        value: test_access_secret_value
ldap_forest_config:
  server.ldap.test.com:
    domain: server.ldap.test.com
    host: fqdn.test.com
    ldap_service_password:
      value: test_ldap_password
    path_to_cert: /home/moveworks/agent/certs/test_ldap_cert.pem
    port: 636
    service_user: service_username
    use_ssl: true
    use_start_tls: true
  server2.ldap.test.com:
    domain: server2.ldap.test.com
    host: fqdn2.test.com
    ldap_service_password:
      value: test_ldap_password
    port: 636
    service_user: service_username2
rest_configs: 
    JIRA: 
        header_decorators: 
        - basic_auth: 
              password: 
                  value: test_basic_auth_password
              username: test_username

By Auth & Secrets Management Type

Azure Key Vault + Single LDAP + Single REST with Oauth2

bond_version: 2.10.3
secrets_provider_config:
    azure:
        default_vault: my_default_vault
moveworks_config: 
    access_key: banner 
    auth_url: [https://agents.moveworks.com/api/v1/auth](https://agents.moveworks.com/api/v1/auth) 
    config_url: [https://agents.moveworks.com/api/v1/config](https://agents.moveworks.com/api/v1/config)    
    moveworks_access_secret: 
        azure_entry: 
            secret_name: access_secret_name
            vault: my_test_vault
ldap_config: 
    host: ldap.test.com
    port: 636
    service_user: test_user
    ldap_service_password: 
        azure_entry:
            secret_name: test_secret
            vault: my_test_vault
            refresh_time_sec: 60
rest_configs: 
    SNOW: 
        header_decorators: 
        - oauth2_client_credentials_auth: 
            client_id: noodle 
            client_secret: 
                azure_entry:
                  secret_name: test_secret
                  vault: my_test_vault
                  refresh_time_sec: 60
            rest_call_config: 
                token_body_key: access_token 
                url:
                  azure_entry: 
                      secret_name: test_secret
                      vault: my_test_vault
                      refresh_time_sec: 60

LDAPS + Jira + Confluence + Azure Key Vault

bond_version: 2.10.1
ldap_config:
  enabled: true
  host: mvwks.net
  ldap_service_password:
    azure_entry:
      secret_name: mw-ldap-secret
  path_to_cert: /home/moveworks/agent/certs/cert.pem
  port: 636
  service_user: MVWKS\svc_moveworks
  use_ssl: true
moveworks_config:
  access_key: moveworks
  auth_url: https://agent.[MOVEWORKS DOMAIN].com/api/v1/auth
  config_url: https://agent.[MOVEWORKS DOMAIN].com/api/v1/config
  moveworks_access_secret:
    encrypted_value:[REDACTED]
rest_configs:
  JIRA:
    enabled: true
    header_decorators:
    - basic_auth:
        password:
          azure_entry:
            secret_name: mw-jira-secret
        username: jira-moveworks
    service: JIRA
  CONFLUENCE:
    enabled: true
    header_decorators:
    - basic_auth:
        password:
          azure_entry:
            secret_name: mw-confluence-secret
        username: confluence-moveworks
    service: CONFLUENCE  
secrets_provider_config:
  azure:
    default_vault: [https://agent-dev-vaulxt.vault.azure.net/](https://agent-dev-vaulxt.vault.azure.net/)

Updated about 3 hours ago