consume fully configurable

.catalog-onboard-pipeline.yaml

@@ -6,7 +6,7 @@ offerings:
     catalog_id: 7df1e4ca-d54c-4fd0-82ce-3d13247308cd
     offering_id: 0294f96e-7314-48d1-a710-c08a541b2119
     variations:
-      - name: standard
+      - name: click-and-go
         mark_ready: false
         install_type: fullstack
         format_kind: stack

ibm_catalog.json

@@ -70,8 +70,10 @@
       ],
       "flavors": [
         {
-          "label": "Standard",
-          "name": "standard",
+          "label": "Click and go",
+          "name": "click-and-go",
+          "index": 1,
+          "working_directory": "./",
           "compliance": {
             "authority": "scc-v3",
             "profiles": [
@@ -223,7 +225,7 @@
               "key": "existing_resource_group_name",
               "type": "string",
               "default_value": "Default",
-              "description": "The name of an existing resource group to provision all resources to.",
+              "description": "The name of an existing resource group to provision the resources.",
               "required": true,
               "custom_config": {
                 "type": "resource_group",
@@ -237,7 +239,7 @@
             {
               "key": "enable_platform_metrics",
               "type": "boolean",
-              "default_value": true,
+              "default_value": false,
               "description": "Setting this to true will enable platform metrics for the Cloud Monitoring instance. NOTE: You can configure 1 instance only of the IBM Cloud Monitoring service per region to collect platform metrics in that location.",
               "required": false
             },
@@ -256,16 +258,48 @@
               "required": false
             },
             {
-              "display_name": "event_notifications_email_list",
-              "key": "en_email_list",
+              "key": "key_protect_plan",
+              "type": "string",
+              "default_value": "tiered-pricing",
+              "description": "The service plan of the Key Protect instance that will be provisioned by this solution. Only used if not supplying `existing_kms_instance_crn`. [Learn more](https://cloud.ibm.com/docs/key-protect?topic=key-protect-pricing-plan).",
+              "required": false,
+              "options": [
+                {
+                  "displayname": "Standard",
+                  "value": "tiered-pricing"
+                },
+                {
+                  "displayname": "Cross-region Resiliency",
+                  "value": "cross-region-resiliency"
+                }
+              ]
+            },
+            {
+              "key": "cloud_monitoring_plan",
+              "type": "string",
+              "default_value": "graduated-tier",
+              "description": "The IBM Cloud Monitoring plan to provision. Available values are `lite` and `graduated-tier` and `graduated-tier-sysdig-secure-plus-monitor` (available in region eu-fr2 only). [Learn more](https://cloud.ibm.com/docs/monitoring?topic=monitoring-service_plans)",
+              "required": false,
+              "options": [
+                {
+                  "displayname": "Lite",
+                  "value": "lite"
+                },
+                {
+                  "displayname": "Graduated Tier",
+                  "value": "graduated-tier"
+                }
+              ]
+            },
+            {
+              "key": "event_notifications_email_list",
               "type": "array",
               "default_value": [],
               "description": "List of emails to configure event notifications.",
               "required": false
             },
             {
-              "display_name": "existing_event_notifications_instance_crn",
-              "key": "existing_en_instance_crn",
+              "key": "existing_event_notifications_instance_crn",
               "type": "string",
               "default_value": "__NULL__",
               "description": "The CRN of existing event notification instance. If not supplied, a new instance is created.",
@@ -279,8 +313,7 @@
               "required": false
             },
             {
-              "display_name": "secrets_manager_service_plan",
-              "key": "sm_service_plan",
+              "key": "secrets_manager_service_plan",
               "type": "string",
               "default_value": "standard",
               "description": "The pricing plan to use for IBM Cloud Secrets Manager. Not used if `existing_secrets_manager_crn` is specified.",
@@ -298,16 +331,16 @@
             },
             {
               "display_name": "disable_secrets_manager_iam_credentials_engine",
-              "key": "skip_iam_authorization_policy",
+              "key": "skip_secrets_manager_iam_auth_policy",
               "type": "boolean",
               "default_value": false,
               "description": "Whether to skip the creation of the IAM authorization policies required to enable the Secrets Manager IAM credentials engine. If set to false, policies will be created that grants the Secrets Manager instance 'Operator' access to the IAM identity service, and 'Groups Service Member Manage' access to the IAM groups service.",
               "required": false
             },
             {
-              "key": "app_config_service_plan",
+              "key": "app_config_plan",
               "type": "string",
-              "default_value": "basic",
+              "default_value": "enterprise",
               "description": "The pricing plan to use for the IBM Cloud App Configuration instance.",
               "required": false,
               "options": [

reference-architectures/reference-architecture-css.md

@@ -1,8 +1,8 @@
 ---
 
 copyright:
-  years: 2024
-lastupdated: "2024-12-05"
+  years: 2024, 2025
+lastupdated: "2025-09-05"
 
 subcollection: deployable-reference-architectures
 
@@ -11,7 +11,7 @@ authors:
   email: [email protected]
 
 # The release that the reference architecture describes
-version: 3.0.0
+version: 4.0.0
 
 # Use if the reference architecture has deployable code.
 # Value is the URL to land the user in the IBM Cloud catalog details page for the deployable architecture.
@@ -52,7 +52,7 @@ https://test.cloud.ibm.com/docs/solution-as-code?topic=solution-as-code-naming-g
 # Cloud foundation for security and observability
 {: #core-security-services-pattern}
 {: toc-content-type="reference-architecture"}
-{: toc-version="3.0.0"}
+{: toc-version="4.0.0"}
 
 <!--
 The IDs, such as {: #title-id} are required for publishing this reference architecture in IBM Cloud Docs. Set unique IDs for each heading. Also include