CLOUD_SDK_OTEL_DISABLED=true

# ADMS

CLOUD_SDK_CFG_ADMS_DEFAULT_CLIENTID=your-adms-client-id-here

CLOUD_SDK_CFG_ADMS_DEFAULT_CLIENTSECRET=your-adms-client-secret-here

CLOUD_SDK_CFG_ADMS_DEFAULT_URL=https://your-tenant.accounts.ondemand.com

CLOUD_SDK_CFG_ADMS_DEFAULT_URI=https://your-adm-host.cfapps.eu20.hana.ondemand.com

CLOUD_SDK_CFG_ADMS_DEFAULT_RESOURCE=urn:sap:identity:application:provider:name:your-adm-app-name

# AGENT GATEWAY

CLOUD_SDK_CFG_AGW_DEFAULT_LANDSCAPE=your-landscape-here

CLOUD_SDK_CFG_AGW_DEFAULT_TENANT_SUBDOMAIN=your-tenant-subdomain-here

CLOUD_SDK_CFG_AGW_DEFAULT_USER_TOKEN=your-user-jwt-here

CLOUD_SDK_CFG_AGW_DEFAULT_SAMPLE_MCP_TOOL=your-sample-mcp-tool-name-here

# AGENT MEMORY

CLOUD_SDK_CFG_HANA_AGENT_MEMORY_DEFAULT_APPLICATION_URL=https://your-agent-memory-api-url-here

CLOUD_SDK_CFG_HANA_AGENT_MEMORY_DEFAULT_UAA='{"url":"https://your-auth-url","clientid":"your-client-id","clientsecret":"your-client-secret"}'

CLOUD_SDK_CFG_HANA_AGENT_MEMORY_DEFAULT_SUBSCRIBER_TENANT=your-subscriber-tenant-subdomain-here

# AI CORE (required for Traceloop/LangGraph integration tests)

AICORE_CLIENT_ID=your-aicore-client-id-here

AICORE_CLIENT_SECRET=your-aicore-client-secret-here

AICORE_AUTH_URL=https://your-aicore-auth-url-here/oauth/token

AICORE_BASE_URL=https://your-aicore-api-url-here/v2

AICORE_RESOURCE_GROUP=default

AICORE_MODEL=anthropic--claude-3-5-haiku

# AI CORE filtering integration tests (tests/aicore/integration/)

# AICORE_FILTER_TEST_MODEL: sap/* model to drive the live filtering scenarios.

# Use the cheapest deployment available on your tenant (e.g. sap/gpt-4o-mini).

# AICORE_FILTER_TEST_SELF_HARM_PROMPT: prompt that should trigger Azure Content

# Safety self-harm detection. Set in the CI secret store, not in source.

# When unset, the "Input filter blocks a harmful prompt" scenario is skipped.

AICORE_FILTER_TEST_MODEL=sap/gpt-4o-mini

AICORE_FILTER_TEST_SELF_HARM_PROMPT=

# AUDITLOG

CLOUD_SDK_CFG_AUDITLOG_DEFAULT_URL=https://your-auditlog-api-url-here

CLOUD_SDK_CFG_AUDITLOG_DEFAULT_UAA='{"url":"https://your-auth-url","clientid":"your-client-id","clientsecret":"your-client-secret"}'

# DATA ANONYMIZATION

CLOUD_SDK_CFG_DATA_ANONYMIZATION_DEFAULT_URL=https://your-data-anonymization-api-url-here

CLOUD_SDK_CFG_DATA_ANONYMIZATION_DEFAULT_CERT=your-base64-encoded-client-certificate-pem

CLOUD_SDK_CFG_DATA_ANONYMIZATION_DEFAULT_KEY=your-base64-encoded-client-private-key-pem

# Alternative to inline base64 cert/key values:

# CLOUD_SDK_CFG_DATA_ANONYMIZATION_DEFAULT_DESTINATION_NAME=your-client-certificate-destination-name

# DESTINATION

CLOUD_SDK_CFG_DESTINATION_DEFAULT_CLIENTID=your-destination-client-id-here

CLOUD_SDK_CFG_DESTINATION_DEFAULT_CLIENTSECRET=your-destination-client-secret-here

CLOUD_SDK_CFG_DESTINATION_DEFAULT_URL=https://your-destination-auth-url-here

CLOUD_SDK_CFG_DESTINATION_DEFAULT_URI=https://your-destination-configuration-uri-here

CLOUD_SDK_CFG_DESTINATION_DEFAULT_IDENTITYZONE=your-identity-zone-here

CLOUD_SDK_CFG_DESTINATION_DEFAULT_TENANT_SUBDOMAIN=your-subscriber-tenant-subdomain-here

# DMS

CLOUD_SDK_CFG_SDM_DEFAULT_URI=https://your-sdm-api-uri-here

CLOUD_SDK_CFG_SDM_DEFAULT_UAA='{"url":"https://your-auth-url","clientid":"your-client-id","clientsecret":"your-client-secret","identityzone":"your-identity-zone"}'

# DPI NG - CONSENT

# Required for all dpi_ng integration tests

CLOUD_SDK_CFG_DPI_NG_DEFAULT_BASE_URL=https://your-dpi-ng-service-host

# Pick ONE of the three auth methods below:

# Option A: Static Bearer Token

# CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_BEARER_TOKEN=your-bearer-token-here

# Option B: OAuth 2.0 Client Credentials

# CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_TOKEN_URL=https://your-auth-host/oauth/token

# CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_CLIENT_ID=your-client-id

# CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_CLIENT_SECRET=your-client-secret

# Option C: Mutual TLS (mTLS)

CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_CERT_FILE=/path/to/client.crt

CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_KEY_FILE=/path/to/client.key

CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_CA_FILE=/path/to/ca.crt # optional

CLOUD_SDK_CFG_DPI_NG_CONSENT_DEFAULT_TENANT_ID=your-tenant-id-here

# OBJECT STORE

CLOUD_SDK_CFG_OBJECTSTORE_DEFAULT_HOST=your-objectstore-host-here

CLOUD_SDK_CFG_OBJECTSTORE_DEFAULT_ACCESS_KEY_ID=your-access-key-id-here

CLOUD_SDK_CFG_OBJECTSTORE_DEFAULT_SECRET_ACCESS_KEY=your-secret-access-key-here

CLOUD_SDK_CFG_OBJECTSTORE_DEFAULT_BUCKET=your-bucket-name-here

# OUTPUT MANAGEMENT

# For cloud mode (destination-based):

CLOUD_SDK_OMS_DESTINATION_NAME=your-output-management-destination-name-here

CLOUD_SDK_OMS_ACCESS_STRATEGY=PROVIDER_ONLY

CLOUD_SDK_OMS_INSTANCE=default

# For local mode (no credentials needed):

# CLOUD_SDK_OMS_TEST_MODE=local