When to use JITR
Configuration
Enable underconnection.jitr in client YAML (see clients/ilyama-edge.yaml):
Environment overrides use
*_env suffix fields for each value.
Flow
- Register device name in console or
platform-tui devices create. - Deploy Omega built with
CLIENT=ilyama-edge(or custom YAML with JITR block). - On startup Omega calls
POST /core/api/v1/devices/jitrwith bootstrap mTLS. - Platform returns MQTT broker URL and device certificate.
- Omega patches
connection.server_urland connects with issued cert.
Idempotency
Enrollment sends a stableIdempotency-Key derived from org_id|fleet_id|device_name. Safe to retry on network failure.
Example
Troubleshooting
→ Edge data sync for SQLite replication after connect