Airlock as a Service Knowledge Base
API Reference Service Status Airlock Console
airlock.com

Stage IAM configuration changes before production

Airlock as a Service allows you to create multiple tenants, each with either a production or a non-production service level.

We recommend starting with a non-production tenant to configure and test a new tenant setup. Once the setup is complete:

  1. Create a production tenant.

  2. Add the required production secrets and key pairs.

  3. Download the configuration from the non-production tenant.

  4. Upload and activate the configuration in the production tenant.

When updating a production tenant, first configure and thoroughly test the updated configuration in a non-production tenant. Once testing is complete, upload the configuration to the production tenant.

Considerations

  • Verify that all secrets and key pairs are configured with the correct values in the production tenant.

  • Do not use placeholder values such as TBD in secrets, key pairs, or the IAM configuration.

  • Use a Redis State Repository for production tenants. Non-production tenants must use an in-memory state repository.

  • If mTLS is configured, use the correct client and server certificates and corresponding private keys, and ensure that the certificates contain the required subject alternative names (SANs).