I use bootstrapping the Graphman based bundles.
I put the json files in the folder /opt/SecureSpan/Gateway/node/default/etc/bootstrap/bundle, then I can import bundles at start of the ssg.
How can I set the passphrase to import a bundle with encrypted value? (like secrets)
Graphman ensures the security of critical Gateway configurations during export and import operations.
To encrypt and decrypt the secrets (secure passwords and keys), the Graphman requester provides an encryption passphrase.
This encryption passphrase is set in the HTTP request header name (x-l7-passphrase). By default, Graphman uses a cluster passphrase.
The value in the x-l7-passphrase header is encoded using Base64 in HTTP requests, whereas the l7-passphrase and encpass headers are sent in plain text without encoding.
The l7-passphrase and encpass headers are deprecated.
The encryption passphrase must be specified during the import operation.
For a bundle to be importable to the target system, the passphrase used to create the bundle must be provided during the import