Set up LaunchDarkly connector

​

Capabilities

• Create and delete members.
• Assign and unassign a base role (reader, writer, admin, no_access) on members. Unassign sets the member to no_access. Owner-role transfer is not exposed; it requires LaunchDarkly’s UI-only reauthentication flow.
• Grant and revoke custom-role assignments on members.
• Add and remove members from teams.

​

Gather LaunchDarkly configuration information

• API Access Token
• Base URL (optional) — only needed for non-US tenants. Use https://app.eu.launchdarkly.com for EU tenants or https://app.launchdarkly.us for Federal tenants. Leave unset for US commercial tenants (defaults to https://app.launchdarkly.com). The value must be exactly one of those three URLs — LaunchDarkly’s regions are subdomains, not paths, so a form like https://app.launchdarkly.com/eu is rejected at startup rather than treated as a valid EU host.

• Reader base role (sufficient for read-only sync). Note that syncing teams and custom roles additionally requires an Enterprise plan — see the warning below; no base role substitutes for it.
• Admin base role, or a custom role granting createMember, deleteMember, updateRole, and updateCustomRole on member/* plus updateTeamMembers on team/*, is required to also create and delete members, assign base roles and custom roles, and change team membership.

​

Configure the LaunchDarkly connector

# baton-launchdarkly-secrets.yaml
apiVersion: v1
kind: Secret
metadata:
  name: baton-launchdarkly-secrets
type: Opaque
stringData:
  # C1 credentials
  BATON_CLIENT_ID: <C1 client ID>
  BATON_CLIENT_SECRET: <C1 client secret>

  # LaunchDarkly config
  BATON_LAUNCHDARKLY_API_TOKEN: <LaunchDarkly API Access Token>
  # Optional: set for EU or Federal tenants; omit for US commercial
  BATON_LAUNCHDARKLY_BASE_URL: <EU or Federal base URL>

# baton-launchdarkly.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: baton-launchdarkly
  labels:
    app: baton-launchdarkly
spec:
  selector:
    matchLabels:
      app: baton-launchdarkly
  template:
    metadata:
      labels:
        app: baton-launchdarkly
        baton: true
        baton-app: launchdarkly
    spec:
      containers:
      - name: baton-launchdarkly
        image: public.ecr.aws/conductorone/baton-launchdarkly:latest
        imagePullPolicy: IfNotPresent
        env:
        - name: BATON_HOST_ID
          value: baton-launchdarkly
        envFrom:
        - secretRef:
            name: baton-launchdarkly-secrets