Project Settings & Links

Central reference for all project URLs, system endpoints, and configuration settings. Nothing secret is listed here — credentials and tokens are managed through Vault.

Project

Setting	Value
Repository	roche-private/model-dp-rdt
Project board	Kanban view
Documentation site	model-docs.ghpages.roche.com
Docs deployment	roche-innersource/model-docs → Cloudflare Pages
GitHub team	model-tech-a
AD group (CIDM)	`GLOAZUGH_MODEL`
Pilot domain	Global Sites Network
SRA ID	`RI0037153`

Vault

All runtime configuration (URLs, credentials, account IDs) is loaded from HashiCorp Vault before running any CLI command.

Setting	Value	Env var
Vault address	`https://vault.service.roche.com`	`VAULT_ADDR`
Vault namespace	`rdt-model-prd`	`VAULT_NAMESPACE`
Secret path (dev)	`secret/dev/ci`	—
Secret path (test)	`secret/test/ci`	—
Secret path (prod)	`secret/prod/ci`	—
Auth method	OIDC + AppRole	—
Service users	`RXPMODE1`, `RXPMODE2`	—

Load Vault secrets into your shell before running CLI commands:

source scripts/vault-env.sh dev   # or test, prod

External system endpoints

All URLs below are loaded from Vault at runtime. The env var column shows what to set for local overrides.

Source systems

System	Purpose	Env var	Config key
RTiS	Canonical data model, ontologies, terminologies	`RTIS_BASE_URL`	`rtis.base_url`
GUPRI	Persistent identifier registration	`GUPRI_BASE_URL`	`gupri.base_url`
Collibra	Data governance, stewardship, classification	`COLLIBRA_BASE_URL`	`collibra.base_url`
MRHub	Master data for G2 validity checks	`MRHUB_BASE_URL`	`mrhub.base_url`
Aurora PostgreSQL	Upstream table profiling	`AURORA_HOST`	`aurora.host`

Target systems

System	Purpose	Env var	Config key
Snowflake	Data warehouse (Bronze/Silver/Gold/Semantic)	`SNOWFLAKE_URL`	`snowflake.url`
Solace	Enterprise event bus	`SOLACE_BROKER_URL`	`solace.broker_url`
	Solace topic	`SOLACE_TOPIC`	`solace.topic`
	Client certificate (PEM)	`SOLACE_CLIENT_CERT`	`solace.client_cert`
	Client private key (PEM)	`SOLACE_CLIENT_KEY`	`solace.client_key`
Sinequa	Enterprise search	`SINEQUA_BASE_URL`	`sinequa.base_url`
Mulesoft	API management (Anypoint)	`MULESOFT_BASE_URL`	`mulesoft.base_url`
ServiceNow	Change management (CIDM)	`SERVICENOW_BASE_URL`	`servicenow.base_url`
LeanIX	Enterprise architecture catalog (stretch)	`LEANIX_BASE_URL`	`leanix.base_url`
Data Marketplace	Data product registry (stretch)	`DATA_MARKETPLACE_BASE_URL`	`data_marketplace.base_url`

Infrastructure

System	Purpose	Env var	Config key
CaaS (Rancher)	Kubernetes hosting for OPA instances	`CAAS_NAMESPACE`	`caas.namespace`
Artifactory	Cargo crate registry	—	—

Snowflake

Setting	Env var	Config key
Account	`SNOWFLAKE_ACCOUNT`	`snowflake.account`
Warehouse	`SNOWFLAKE_WAREHOUSE`	`snowflake.warehouse`
Database	`SNOWFLAKE_DATABASE`	`snowflake.database`
Schema prefix	`SNOWFLAKE_SCHEMA_PREFIX`	`snowflake.schema_prefix`
Role	`SNOWFLAKE_ROLE`	`snowflake.role`
User	`SNOWFLAKE_USER`	`snowflake.user`
Auth method	`SNOWFLAKE_AUTH_METHOD`	`snowflake.auth_method`
OAuth token URL	`SNOWFLAKE_OAUTH_TOKEN_URL`	`snowflake.oauth_token_url`
OAuth scope	`SNOWFLAKE_OAUTH_SCOPE`	`snowflake.oauth_scope`

Schema naming per environment

Environment	Bronze	Silver	Gold	Semantic
Dev	`DEV_BRONZE`	`DEV_SILVER`	`DEV_GOLD`	`DEV_SEMANTIC`
Test	`TEST_BRONZE`	`TEST_SILVER`	`TEST_GOLD`	`TEST_SEMANTIC`
Prod	`PROD_BRONZE`	`PROD_SILVER`	`PROD_GOLD`	`PROD_SEMANTIC`

Authentication

Context	Method	User
CI/CD pipelines	RSA key-pair	`S1DEINGI`
Local development	External Browser SSO	`STREITS` (personal)

PAT (Personal Access Token) is not approved at Roche for Snowflake.

RTiS entity identifiers

Static ontology IDs configured in roche-data.toml. These change only when the RTiS model changes.

Entity	Class ID	Terminology ID
organization-site	`ROX38275200443992329`	`ROX38218176443982250`
waste-tracking	TBD (pending RTiS class request)	TBD

Config resolution order

roche-data.toml (base) → [environments.{target}] overrides → env var overrides

Every rdt-model-* command requires --target dev|test|prod (or RDT_TARGET env var). There is no default.

Collibra

Setting	Env var	Config key
Base URL	`COLLIBRA_BASE_URL`	`collibra.base_url`
Client ID	`MULESOFT_MODEL_CLIENT_ID`	`collibra.client_id`
Client secret	`MULESOFT_MODEL_CLIENT_SECRET`	`collibra.client_secret`
Bridge key	`X-META-BRIDGE-KEY`	`collibra.bridge_key`

Project-level env vars

Env var	Purpose
`RDT_TARGET`	Target environment (`dev`, `test`, `prod`) — set in shell profile
`RDT_PROJECT_NAME`	Project name override
`RDT_DOMAIN`	Business domain override
`RDT_REPO`	Repository identifier override
`RDT_BOARD`	Project board URL override
`RDT_SRA_ID`	Security Risk Assessment ID
`RDT_SRA_STATUS`	SRA approval status
`GITHUB_ORG`	GitHub organization
`GITHUB_REPO`	GitHub repository name
`GITHUB_BOARD_URL`	Project board URL
`RUST_LOG`	Override tracing verbosity (e.g. `debug`, `rdt_model_pull=trace`)

Platform access tracker

Access request status for each external system. See the platforms/ directory for details.

Platform	Access task	Issue	Status
RTiS	A01	#15	Blocked — awaiting service account
GUPRI	A02	#16	Blocked — awaiting service account
Snowflake	A05, A06	#23	Not started
MRHub	A03, A04	#24	Not started
Collibra	A07, A08	#25	Not started
Mulesoft	A09	#26	Not started
ServiceNow	A12	#27	Not started
CaaS	A13	#28	Not started
Vault	A16	#70	Not started
LeanIX	A14	#29	Not started (stretch)
Data Marketplace	A15	#30	Not started (stretch)
Aurora PostgreSQL	A18	—	Not started
Snowflake WAM OAuth	A19	—	Not started