Add golden_configurations tool for golden config tree management

[keepithuman]

Features include:

• Creation of golden config trees with device type validation
• Automatic variable management for Jinja2 templates
• Node template support with variable extraction
• Device OS type validation against platform cache

Please let me know if any changes or additional documentation are needed!

Tested from Claude against Itential Platform_6

Perfect! I've successfully created a comprehensive basic golden configuration tree for Cisco IOS devices on the Itential Platform. Here's a summary of what was created:
Golden Configuration Tree Structure
Root Configuration: Cisco-IOS-Basic-Golden-Config

Device Type: cisco-ios
Configuration ID: 685f03ac786de064a8168c2e

Main Configuration Categories:

1. System Configuration (system-config)

Hostname Check: Template for setting device hostname with variable support
Banner Check: Login banner with unauthorized access warning
NTP Configuration: Network time protocol setup with multiple servers and timezone

2. Security Configuration (security-config)

Password Policy: Service password encryption, minimum length requirements, enable secret, and admin user
SSH Configuration: SSH version 2, timeout settings, authentication retries, and VTY line security
ACL Check: Management access control list with VTY line restrictions

3. Interface Configuration (interface-config)

Interface Description: Template for ensuring all interfaces have proper descriptions
Unused Ports: Template for shutting down and labeling unused interfaces

4. Routing Configuration (routing-config)

Default Route: Template for configuring default gateway

Key Features:
Template Variables: Each template supports Jinja2 templating with default values, allowing for:

Customizable hostnames, IP addresses, and network ranges
Flexible NTP server configuration
Variable management networks for ACLs
Dynamic interface handling

Security Best Practices: The configuration includes:

Password encryption and complexity requirements
SSH-only access with proper timeout settings
Management access restrictions via ACLs
Proper login banners for compliance

Operational Standards: Ensures:

All interfaces are documented with descriptions
Unused ports are properly secured
Network time synchronization is configured
Default routing is properly established

This golden configuration tree provides a solid foundation for Cisco IOS device compliance checking and can be easily extended with additional configuration requirements as needed. You can now assign devices or device groups to these configuration nodes and set up remediation workflows for non-compliant configurations.