palantir-multi-env-setup

# Palantir Multi-Environment Setup ## Overview Configure Foundry integrations across dev/staging/prod environments with separate credentials, enrollment hostnames, and scope policies per environment. ## Prerequisites - Foundry enrollments for each environment (or separate projects within one enrollment) - Secrets manager (AWS SM, GCP SM, or Vault) - Familiarity with `palantir-security-basics` ## Instructions ### Step 1: Environment Configuration ```python # src/config.py import os from dataclasses import dataclass @dataclass class FoundryEnvConfig: hostname: str client_id: str client_secret: str scopes: list[str] ontology: str ENVIRONMENTS = { "development": FoundryEnvConfig( hostname=os.environ.get("DEV_FOUNDRY_HOSTNAME", "dev.palantirfoundry.com"), client_id=os.environ.get("DEV_FOUNDRY_CLIENT_ID", ""), client_secret=os.environ.get("DEV_FOUNDRY_CLIENT_SECRET", ""), scopes=["api:read-data"], # Read-only in dev ontology="dev-ontology", ), "staging": FoundryEnvConfig( hostname=os.environ.get("STG_FOUNDRY_HOSTNAME", "staging.palantirfoundry.com"), client_id=os.environ.get("STG_FOUNDRY_CLIENT_ID", ""), client_secret=os.environ.get("STG_FOUNDRY_CLIENT_SECRET", ""), scopes=["api:read-data", "api:write-data"], ontology="staging-ontology", ), "production": FoundryEnvConfig( hostname=os.environ.get("PROD_FOUNDRY_HOSTNAME", "prod.palantirfoundry.com"), ...