Skip to content

VC-51819 + VC-51672: Update NGTS Strata spec — remove Application, users, teams, and renewal ops#1232

Open
rajitshah-ca wants to merge 8 commits into
PaloAltoNetworks:masterfrom
rajitshah-ca:VC-51819-remove-ngts-application-apis
Open

VC-51819 + VC-51672: Update NGTS Strata spec — remove Application, users, teams, and renewal ops#1232
rajitshah-ca wants to merge 8 commits into
PaloAltoNetworks:masterfrom
rajitshah-ca:VC-51819-remove-ngts-application-apis

Conversation

@rajitshah-ca
Copy link
Copy Markdown

@rajitshah-ca rajitshah-ca commented Apr 29, 2026

Adds the Venafi NGTS TLS Protect Cloud API reference to the Strata Cloud Manager section of pan.dev, and excludes operations that are not in scope for the Strata publication.

Added

NGTS TLS Protect Cloud API — 97 paths across 25 categories:

Certificates, Certificate Installations, Certificate Discovery, Certificate Import, Private Key Import, Certificate Request, Certificate Policy, Credential Management, Machine Identities, Machine Types, Machines, Event Logs, VSatellite, Certificate Inventory Monitoring, Certificate Auto-renewal Monitoring, Certificate Expiration Reports, Tags, Workload Identity Manager Configurations, Workload Identity Manager Sub CA Providers, Workload Identity Manager Policies, Workload Identity Manager Intermediate Certificates, Certificate Approvals, Certificate Revocation Approvals, Plugins, Service Accounts

Files:

  • `openapi-specs/scm/config/ngts/tlsprotect-cloud.json` — spec (from ua-repo CI)
  • `products/scm/api/config/ngts/ngts-api.md` — overview landing page
  • `docusaurus.config.ts` — NGTS plugin entry

Excluded from the full spec (not published to pan.dev)

Application category (VC-51819, ua-repo MR-355 — merged 2026-04-28):

  • `applications_getAll`, `applications_getById`, `applications_create`, `applications_update`, `applications_delete`
  • `applications_invitations_create`, `applications_getScanafiConfigById`
  • `applications_assignToCertificates`, `applications_getByName`
  • `certificateissuingtemplates_getByAlias`

Certificate Renewal Configuration (VC-51819, ua-repo MR-355):

  • `get-v1-application-renewal-configuration`
  • `put-v1-application-renewal-configuration`

Users, UserAccounts, and Teams (VC-51672, ua-repo MR-357 — merged 2026-05-08):

  • `/v1/users`, `/v1/users/{id}` and 4 sub-paths (6 paths)
  • `/v1/useraccounts` (1 path)
  • `/v1/teams`, `/v1/teams/{id}`, `/v1/teams/{id}/members`, `/v1/teams/{id}/owners` (4 paths)

Webhooks (VC-51671, ua-repo MR-358 — merged 2026-05-15):

  • `connectors_getAll`, `connectors_create`, `connectors_update`, `connectors_delete`
  • Paths: `/v1/connectors`, `/v1/connectors/{id}`

Full spec scope: 111 paths → 97 paths published (-14)

Why

NGTS is scoping the Strata pan.dev publication to certificate and machine identity management operations only. Application management, user/team management, and webhook connectors are excluded from this publication. Source of truth: ua-repo `siteconf-pandev.yaml`.

Validation

  • Spec pulled from ua-repo CI pipeline 2529253922 / job 14397161909 (commit 9d1ac6e5, post MR-358 merge to master)
  • 97 paths confirmed in output spec
  • Spectral linted locally against `techpubs/docs/api-specs` `spectral/netsec-ruleset.yaml` — 0 errors (pre-existing warnings unchanged)

Relation to existing #1167

This branch was forked from `add-ngts-api-docs` and contains all of #1167's commits plus the VC-51819, VC-51672, and VC-51671 spec changes. Once this merges, #1167 can be closed (or rebased) to avoid conflicts.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 30, 2026

Visit the preview URL for this PR (updated for commit 5f5b175):

https://pan-dev-f1b58--pr1232-76mufee9.web.app

(expires Wed, 20 May 2026 06:12:43 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: 9359a9fa100d5fdb082f75280473a90b1f96eb51

@rajitshah-ca rajitshah-ca changed the title VC-51819: Remove Application category and 2 renewal ops from NGTS Strata spec VC-51819 + VC-51672: Update NGTS Strata spec — remove Application, users, teams, and renewal ops May 11, 2026
@rajitshah-ca rajitshah-ca force-pushed the VC-51819-remove-ngts-application-apis branch from 68adaef to 65a0a8f Compare May 19, 2026 16:04
rajitshah-ca and others added 8 commits May 19, 2026 11:07
Adds full NGTS API reference under SCM > NGTS Configuration, mirroring
developer.venafi.com/tlsprotectcloud with all 30 API categories and 183
endpoints. Spec generated from devhub-manager merged OAS, transformed to
meet PANW Spectral standards (0 errors). POC branch — pending proper
workflow through pandev-tools and api-specs MR.

EPIC: VC-50859
Replaces manually generated spec with output from ua-repo CI pipeline
(Generate PANW Spec job, MR-353). Spec is now produced automatically
by devhub-manager + transform-to-panw-spec.py on every siteconf.yaml change.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Update spec to use scmOAuth + scmToken (Bearer JWT) matching other SCM
APIs. Rewrite intro page auth section to describe OAuth2 client
credentials flow instead of API key.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…ata spec

These operations are not needed for Strata pan.dev publication. Source of
truth: ua-repo MR-355 (merged 2026-04-28).

Removed:
- Application category (10 operationIds): applications_getAll, applications_getById,
  applications_create, applications_update, applications_delete,
  applications_invitations_create, applications_getScanafiConfigById,
  applications_assignToCertificates, applications_getByName,
  certificateissuingtemplates_getByAlias
- Certificate Renewal Configuration: get-v1-application-renewal-configuration,
  put-v1-application-renewal-configuration

Spec regenerated from ua-repo CI (job 14131433168). Spectral linted locally
against techpubs/docs/api-specs netsec-ruleset.yaml — 0 errors.
…672, VC-51819)

Removes 12 paths no longer present in the NGTS Strata spec:
- /v1/users, /v1/users/{id} and sub-paths (6 paths)
- /v1/useraccounts (1 path)
- /v1/teams, /v1/teams/{id} and sub-paths (5 paths)

Built from ua-repo CI pipeline 2516789573 (job 14314023258, commit 68dcc20)
which incorporates MR-355 (VC-51819 Application removal) and MR-357 (VC-51672 users/teams removal).
…-51671)

Removes /v1/connectors and /v1/connectors/{id} paths and the Webhooks
tag. Mirrors ua-repo MR-358 (merged 2026-05-15).
@rajitshah-ca rajitshah-ca force-pushed the VC-51819-remove-ngts-application-apis branch from 65a0a8f to bb74d70 Compare May 19, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants