chore(docs): Translate doc structure for compatibility with doctool and upgrade bootstrap workflow

Author: m8rmclaren

.github/workflows/keyfactor-starter-workflow.yml renamed to .github/workflows/keyfactor-release-workflow.yml

@@ -1,4 +1,4 @@
-name: Keyfactor Bootstrap Workflow
+name: Keyfactor Release Workflow
 
 on:
   workflow_dispatch:
@@ -11,9 +11,10 @@ on:
 
 jobs:
   call-starter-workflow:
-    uses: keyfactor/actions/.github/workflows/starter.yml@v2
+    uses: keyfactor/actions/.github/workflows/starter.yml@v3
     secrets:
       token: ${{ secrets.V2BUILDTOKEN}}
       APPROVE_README_PUSH: ${{ secrets.APPROVE_README_PUSH}}
       gpg_key: ${{ secrets.KF_GPG_PRIVATE_KEY }}
       gpg_pass: ${{ secrets.KF_GPG_PASSPHRASE }}
+                

README.md

@@ -1,154 +1,164 @@
+<h1 align="center" style="border-bottom: none">
+    GCP Load Balancer Universal Orchestrator Extension
+</h1>
 
-# GCP Load Balancer
+<p align="center">
+  <!-- Badges -->
+<img src="https://img.shields.io/badge/integration_status-production-3D1973?style=flat-square" alt="Integration Status: production" />
+<a href="https://github.com/Keyfactor/gcp-loadbalancer-orchestrator/releases"><img src="https://img.shields.io/github/v/release/Keyfactor/gcp-loadbalancer-orchestrator?style=flat-square" alt="Release" /></a>
+<img src="https://img.shields.io/github/issues/Keyfactor/gcp-loadbalancer-orchestrator?style=flat-square" alt="Issues" />
+<img src="https://img.shields.io/github/downloads/Keyfactor/gcp-loadbalancer-orchestrator/total?style=flat-square&label=downloads&color=28B905" alt="GitHub Downloads (all assets, all releases)" />
+</p>
 
-The Google Cloud Platform (GCP) Load Balancer Orchestrator allows for the management of Google Cloud Platform Load Balancer certificate stores.  Inventory, Management-Add, and Management-Remove functions are supported.  Also, re-binding to endpoints IS supported for certificate renewals (but NOT adding new certificates).  The orchestrator uses the Google Cloud Compute Engine API (https://cloud.google.com/compute/docs/reference/rest/v1) to manage stores.
+<p align="center">
+  <!-- TOC -->
+  <a href="#support">
+    <b>Support</b>
+  </a>
+  ·
+  <a href="#installation">
+    <b>Installation</b>
+  </a>
+  ·
+  <a href="#license">
+    <b>License</b>
+  </a>
+  ·
+  <a href="https://github.com/orgs/Keyfactor/repositories?q=orchestrator">
+    <b>Related Integrations</b>
+  </a>
+</p>
 
-#### Integration status: Production - Ready for use in production environments.
 
-## About the Keyfactor Universal Orchestrator Extension
+## Overview
 
-This repository contains a Universal Orchestrator Extension which is a plugin to the Keyfactor Universal Orchestrator. Within the Keyfactor Platform, Orchestrators are used to manage “certificate stores” &mdash; collections of certificates and roots of trust that are found within and used by various applications.
+The GCP Load Balancer Universal Orchestrator extension enables Keyfactor Command to manage SSL/TLS certificates within Google Cloud Platform (GCP) Load Balancers. GCP Load Balancers ensure that users can securely access applications using HTTPS by utilizing SSL/TLS certificates. These certificates need to be managed efficiently to ensure uninterrupted, secure connections.
 
-The Universal Orchestrator is part of the Keyfactor software distribution and is available via the Keyfactor customer portal. For general instructions on installing Extensions, see the “Keyfactor Command Orchestrator Installation and Configuration Guide” section of the Keyfactor documentation. For configuration details of this specific Extension see below in this readme.
+Within Keyfactor Command, defined Certificate Stores represent the configured SSL/TLS certificates that are managed in the GCP environment. These Certificate Stores can be thought of as logical groupings of certificates, which can be associated with specific GCP projects or regions. The Orchestrator's job is to automate the inventory, addition, and removal of these certificates, streamlining the certificate lifecycle management process for GCP Load Balancers.
 
-The Universal Orchestrator is the successor to the Windows Orchestrator. This Orchestrator Extension plugin only works with the Universal Orchestrator and does not work with the Windows Orchestrator.
+## Compatibility
 
-## Support for GCP Load Balancer
+This integration is compatible with Keyfactor Universal Orchestrator version 10.1 and later.
 
-GCP Load Balancer is supported by Keyfactor for Keyfactor customers. If you have a support issue, please open a support ticket via the Keyfactor Support Portal at https://support.keyfactor.com
+## Support
+The GCP Load Balancer Universal Orchestrator extension is supported by Keyfactor for Keyfactor customers. If you have a support issue, please open a support ticket with your Keyfactor representative. If you have a support issue, please open a support ticket via the Keyfactor Support Portal at https://support.keyfactor.com. 
+ 
+> To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab.
 
-###### To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab.
+## Installation
+Before installing the GCP Load Balancer Universal Orchestrator extension, it's recommended to install [kfutil](https://github.com/Keyfactor/kfutil). Kfutil is a command-line tool that simplifies the process of creating store types, installing extensions, and instantiating certificate stores in Keyfactor Command.
 
----
 
+1. Follow the [requirements section](docs/gcploadbal.md#requirements) to configure a Service Account and grant necessary API permissions.
 
----
+    <details><summary>Requirements</summary>
 
+    ### GCP Load Balancer Configuration
 
+    **1. In Keyfactor Command, go to Settings (the gear icon in the top right) => Certificate Store Types and create a new certificate store type:**
 
-## Keyfactor Version Supported
+    ![](images/image1.png)
 
-The minimum version of the Keyfactor Universal Orchestrator Framework needed to run this version of the extension is 10.1
-## Platform Specific Notes
+    ![](images/image2.png)
 
-The Keyfactor Universal Orchestrator may be installed on either Windows or Linux based platforms. The certificate operations supported by a capability may vary based what platform the capability is installed on. The table below indicates what capabilities are supported based on which platform the encompassing Universal Orchestrator is running.
-| Operation | Win | Linux |
-|-----|-----|------|
-|Supports Management Add|&check; |  |
-|Supports Management Remove|&check; |  |
-|Supports Create Store|  |  |
-|Supports Discovery|  |  |
-|Supports Renrollment|  |  |
-|Supports Inventory|&check; |  |
+    The certificate store type set up for the GCP Load Balancer Orchestrator should have the following options set:
 
+    - **Name:** A descriptive name for the certificate store type
+    - **Short Name:** Must be **GCPLoadBal** or the alternative name you used to create the folder in the {installation folder}\extensions folder.
+    - **Custom Capability** - Leave unchecked
+    - **Supported Job Types** – Select Inventory, Add, and Remove
+    - **General Settings** - Leave Needs Server and Uses PowerShell unchecked.  Select Blueprint Allowed if you plan to use blueprinting.
+    - **Password Settings** - Leave both options unchecked
+    - **Store Path Type** - Freeform
+    - **Supports Custom Alias** - Optional.  If no alias is provided, one will be dynamically created by the GCP Load Balancer Orchestrator.
+    - **Private Key Handling: ** Required (Adding a certificate to a GCP Load Balancer certificate store without the private key is not a valid use case)
+    - **PFX Password Style:** Default
 
+    **Parameters:** Add 1 custom parameter if authenticating to the GCP API library by passing the GCP service account key from Keyfactor Command (see Authentication):
 
+    ![](images/image3.png)
 
+    - Name: Must be **jsonKey**
+    - Display Name: Desired custom display name
+    - Type: Secret
+    - Change Default Value: Unchecked
+    - Default Value: Leave blank
 
----
 
 
-# Introduction 
-- The Google Cloud Platform (GCP) Load Balancer Orchestrator allows for the management of Google Cloud Platform Load Balancer certificate stores.  Inventory, Management-Add, and Management-Remove functions are supported.  Also, re-binding to endpoints IS supported for certificate renewals (but NOT adding new certificates).  The orchestrator uses the Google Cloud Compute Engine API (https://cloud.google.com/compute/docs/reference/rest/v1) to manage stores.
+    **2. Create a new GCP Load Balancer certificate store.  Navigate to Certificate Locations =\> Certificate Stores within Keyfactor Command to add the store. Below are the values that should be entered.**
+    ![](images/image4.png)
 
+    - **Category:** Must be the GCP Load Balancer type you created in Step 1.
 
+    - **Container:** Optional container name if using this feature.  Please consult the Keyfactor Command Reference Guide for more information on this feature.
 
-# Use Cases
+    - **Client Machine:** The name or IP address of the Orchestrator server that will be handling GCP jobs.
 
-The GCP Load Balancer Orchestrator supports the following capabilities:
+    - **Store Path:** This should be your Google Cloud project ID.  This will work against GCP Global resources.  Optionally, you can append "/" with the region you wish to process against.  Please refer to the following page for a list of valid region codes (GCP code column): https://gist.github.com/rpkim/084046e02fd8c452ba6ddef3a61d5d59.
 
-- Inventory
-- Management (Add)
-- Management (Remove)
+    - **Service Account Key:** If you will be authenticating via passing credentials from Keyfactor Command, you must add this value as follows:
+      - No Service Account Key: Unchecked
+      - Secret Source: "Keyfactor Secrets" if you wish to store the GCP service account key in the Keyfactor secrets engine or "Load From PAM Provider" if you have set up a PAM provider integration within Keyfactor Command and wish to store this value there.
+      - Enter and Confirm Service Account Key: The JSON-based service account key you acquired from GCP (See Authentication).
 
+    **Inventory Schedule:** Set whether to schedule Inventory jobs for this certificate store, and if so, the frequency here.
 
+    ### Authentication
 
-# Versioning
+    A service account is necessary for authentication to GCP.  The following are the required permissions:
+    - compute.sslCertificates.create
+    - compute.sslCertificates.delete
+    - compute.sslCertificates.list
+    - compute.sslCertificates.get
+    - compute.targetHttpsProxies.list
+    - compute.targetHttpsProxies.setSslCertificates
+    - compute.regionSslCertificates.list
 
-The version number of a the GCP Load Balancer Orchestrator can be verified by right clicking on the GCPLoadBalancer.dll file, selecting Properties, and then clicking on the Details tab.
+    The agent supports having credentials provided by the environment, environment variable, or passed manually from Keyfactor Command.  You can read more about the first two options [here] (https://cloud.google.com/docs/authentication/production#automatically).
 
+    To pass credentials from Keyfactor Command you need to first create a service account and then download a service account key.  Instructions are [here](https://cloud.google.com/docs/authentication/production#manually).  Remember to assign the appropriate role/permissions for the service account.  Afterwards inside Keyfactor Command copy and paste the contents of the service account key in the password field for the GCP Certificate Store Type.
 
 
-# Keyfactor Version Supported
 
-The F5 Orchestrator has been tested using Keyfactor Command version 9.4 and the Keyfactor Universal Orchestrator version 9.5.  However, this should be compatible with any Keyfactor versions 9.x and above.
+    </details>
 
+2. Create Certificate Store Types for the GCP Load Balancer Orchestrator extension. 
 
+    * **Using kfutil**:
 
-# GCP Load Balancer Orchestrator Installation
+        ```shell
+        # GCP Load Balancer
+        kfutil store-types create GCPLoadBal
+        ```
 
-1. In the Keyfactor Orchestrator installation folder (by convention C:\Program Files\Keyfactor\Keyfactor Orchestrator), find the "extensions" folder. Underneath that, create a new folder named "GCPLoadBal".  You may choose a different folder name if you want, but when you get to GCP Load Balancer Configuration - Step 1, the Short Name you choose must match this folder name.  Also, the folder name must be a maximum of 10 characters long.
-2. Download the latest version of the GCP Load Balancer Orchestrator from [GitHub](https://github.com/Keyfactor/gcp-loadbalancer-orchestrator).
-3. Copy the contents of the download installation zip file to the folder created in Step 1.
-4. (Optional) If you decided to name of the folder in step 1 to something different than the suggested name - GCPLoadBal - you will need to edit the manifest.json file.  For each section, change {folder name} in "CertStores.{folder name}.*Capability*" to the folder name you used for the store type.  
+    * **Manually**:
+        * [GCP Load Balancer](docs/gcploadbal.md#certificate-store-type-configuration)
 
+3. Install the GCP Load Balancer Universal Orchestrator extension.
+    
+    * **Using kfutil**: On the server that that hosts the Universal Orchestrator, run the following command:
 
+        ```shell
+        # Windows Server
+        kfutil orchestrator extension -e gcp-loadbalancer-orchestrator@latest --out "C:\Program Files\Keyfactor\Keyfactor Orchestrator\extensions"
 
-# GCP Load Balancer Configuration
+        # Linux
+        kfutil orchestrator extension -e gcp-loadbalancer-orchestrator@latest --out "/opt/keyfactor/orchestrator/extensions"
+        ```
 
-**1. In Keyfactor Command, go to Settings (the gear icon in the top right) => Certificate Store Types and create a new certificate store type:**
+    * **Manually**: Follow the [official Command documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/CustomExtensions.htm?Highlight=extensions) to install the latest [GCP Load Balancer Universal Orchestrator extension](https://github.com/Keyfactor/gcp-loadbalancer-orchestrator/releases/latest).
 
-![](images/image1.png)
+4. Create new certificate stores in Keyfactor Command for the Sample Universal Orchestrator extension.
 
-![](images/image2.png)
+    * [GCP Load Balancer](docs/gcploadbal.md#certificate-store-configuration)
 
-The certificate store type set up for the GCP Load Balancer Orchestrator should have the following options set:
 
-- **Name:** A descriptive name for the certificate store type
-- **Short Name:** Must be **GCPLoadBal** or the alternative name you used to create the folder in the {installation folder}\extensions folder.
-- **Custom Capability** - Leave unchecked
-- **Supported Job Types** – Select Inventory, Add, and Remove
-- **General Settings** - Leave Needs Server and Uses PowerShell unchecked.  Select Blueprint Allowed if you plan to use blueprinting.
-- **Password Settings** - Leave both options unchecked
-- **Store Path Type** - Freeform
-- **Supports Custom Alias** - Optional.  If no alias is provided, one will be dynamically created by the GCP Load Balancer Orchestrator.
-- **Private Key Handling: ** Required (Adding a certificate to a GCP Load Balancer certificate store without the private key is not a valid use case)
-- **PFX Password Style:** Default
 
-**Parameters:** Add 1 custom parameter if authenticating to the GCP API library by passing the GCP service account key from Keyfactor Command (see Authentication):
+## License
 
-![](images/image3.png)
+Apache License 2.0, see [LICENSE](LICENSE).
 
-- Name: Must be **jsonKey**
-- Display Name: Desired custom display name
-- Type: Secret
-- Change Default Value: Unchecked
-- Default Value: Leave blank
-
-
-
-**2. Create a new GCP Load Balancer certificate store.  Navigate to Certificate Locations =\> Certificate Stores within Keyfactor Command to add the store. Below are the values that should be entered.**
-![](images/image4.png)
-
-- **Category:** Must be the GCP Load Balancer type you created in Step 1.
-
-- **Container:** Optional container name if using this feature.  Please consult the Keyfactor Command Reference Guide for more information on this feature.
-
-- **Client Machine:** The name or IP address of the Orchestrator server that will be handling GCP jobs.
-
-- **Store Path:** This should be your Google Cloud project ID.  This will work against GCP Global resources.  Optionally, you can append "/" with the region you wish to process against.  Please refer to the following page for a list of valid region codes (GCP code column): https://gist.github.com/rpkim/084046e02fd8c452ba6ddef3a61d5d59.
-
-- **Service Account Key:** If you will be authenticating via passing credentials from Keyfactor Command, you must add this value as follows:
-  - No Service Account Key: Unchecked
-  - Secret Source: "Keyfactor Secrets" if you wish to store the GCP service account key in the Keyfactor secrets engine or "Load From PAM Provider" if you have set up a PAM provider integration within Keyfactor Command and wish to store this value there.
-  - Enter and Confirm Service Account Key: The JSON-based service account key you acquired from GCP (See Authentication).
-
-**Inventory Schedule:** Set whether to schedule Inventory jobs for this certificate store, and if so, the frequency here.
-
-
-
-# Authentication
-
-A service account is necessary for authentication to GCP.  The following are the required permissions:
-- compute.sslCertificates.create
-- compute.sslCertificates.delete
-- compute.sslCertificates.list
-- compute.sslCertificates.get
-- compute.targetHttpsProxies.list
-- compute.targetHttpsProxies.setSslCertificates
-- compute.regionSslCertificates.list
-
-The agent supports having credentials provided by the environment, environment variable, or passed manually from Keyfactor Command.  You can read more about the first two options [here] (https://cloud.google.com/docs/authentication/production#automatically).
-
-To pass credentials from Keyfactor Command you need to first create a service account and then download a service account key.  Instructions are [here](https://cloud.google.com/docs/authentication/production#manually).  Remember to assign the appropriate role/permissions for the service account.  Afterwards inside Keyfactor Command copy and paste the contents of the service account key in the password field for the GCP Certificate Store Type.
+## Related Integrations
 
+See all [Keyfactor Universal Orchestrator extensions](https://github.com/orgs/Keyfactor/repositories?q=orchestrator).