Skip to content

Commit ddefa2c

Browse files
feat(SecretManagement): migrate secrets to AWS SM
1 parent f4e0caf commit ddefa2c

File tree

8 files changed

+28
-13
lines changed

8 files changed

+28
-13
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
| [Demo](./charts/demo/README.md) | 2.1.0 | latest | Formance Private Regions Demo | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/demo)](https://artifacthub.io/packages/search?repo=demo) |
1313
| [Membership](./charts/membership/README.md) | 2.2.1 | v1.1.0 | Formance Membership API. Manage stacks, organizations, regions, invitations, users, roles, and permissions. | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/membership)](https://artifacthub.io/packages/search?repo=membership) |
1414
| [Portal](./charts/portal/README.md) | 2.0.5 | 5e7b404a3a208b1f38603719e02a8b1883c10acf | Formance Portal | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/portal)](https://artifacthub.io/packages/search?repo=portal) |
15-
| [Regions](./charts/regions/README.md) | 2.8.4 | latest | Formance Private Regions Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/regions)](https://artifacthub.io/packages/search?repo=regions) |
15+
| [Regions](./charts/regions/README.md) | 2.9.4 | latest | Formance Private Regions Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/regions)](https://artifacthub.io/packages/search?repo=regions) |
1616
| [Stargate](./charts/stargate/README.md) | 0.6.1 | latest | Formance Stargate gRPC Gateway | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/stargate)](https://artifacthub.io/packages/search?repo=stargate) |
1717

1818
## How to contribute

charts/agent/README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
# agent
22

3+
![Version: 2.5.0](https://img.shields.io/badge/Version-2.5.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.0](https://img.shields.io/badge/AppVersion-v2.2.0-informational?style=flat-square)
34
![Version: 2.5.0](https://img.shields.io/badge/Version-2.5.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.0](https://img.shields.io/badge/AppVersion-v2.2.0-informational?style=flat-square)
45

56
Formance Membership Agent Helm Chart
@@ -47,9 +48,10 @@ Formance Membership Agent Helm Chart
4748
| affinity | object | `{}` | |
4849
| agent.authentication.clientID | string | `""` | |
4950
| agent.authentication.clientSecret | string | `""` | |
50-
| agent.authentication.existingSecretToken | string | `""` | |
51+
| agent.authentication.existingSecret | string | `""` | |
5152
| agent.authentication.issuer | string | `"https://app.formance.cloud/api"` | |
5253
| agent.authentication.mode | string | `"bearer"` | |
54+
| agent.authentication.secretKeys.secret | string | `""` | |
5355
| agent.baseUrl | string | `""` | |
5456
| agent.id | string | `"b7549a16-f74a-4815-ab1e-bb8ef1c3833b"` | |
5557
| agent.outdated | bool | `false` | Any region: - this flag is sync by the server - it will mark the associated region as outdated and will block any new Creation/Enable/Restore |

charts/agent/templates/_helpers.tpl

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,8 @@ app.kubernetes.io/instance: {{ .Release.Name }}
2929
{{- if gt (len .Values.agent.authentication.existingSecretToken) 0 }}
3030
valueFrom:
3131
secretKeyRef:
32-
name: {{ .Values.agent.authentication.existingSecretToken }}
33-
key: "token"
32+
name: {{ .Values.agent.authentication.existingSecret }}
33+
key: {{ .Values.agent.authentication.secretKeys.secret | default "token" }}
3434
{{- else }}
3535
value: {{ .Values.agent.authentication.token }}
3636
{{- end }}

charts/agent/values.schema.json

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,22 @@
1515
"clientSecret": {
1616
"type": "string"
1717
},
18-
"existingSecretToken": {
18+
"existingSecret": {
1919
"type": "string"
2020
},
2121
"issuer": {
2222
"type": "string"
2323
},
2424
"mode": {
2525
"type": "string"
26+
},
27+
"secretKeys": {
28+
"properties": {
29+
"secret": {
30+
"type": "string"
31+
}
32+
},
33+
"type": "object"
2634
}
2735
},
2836
"type": "object"

charts/agent/values.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,10 @@ agent:
109109
issuer: https://app.formance.cloud/api
110110
clientID: ""
111111
clientSecret: ""
112-
existingSecretToken: ""
112+
existingSecret: ""
113+
secretKeys:
114+
secret: ""
115+
113116

114117
# -- Public Region
115118
# mode: token

charts/regions/Chart.lock

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,9 @@ dependencies:
22
- name: agent
33
repository: file://../agent
44
version: 2.5.0
5+
version: 2.5.0
56
- name: operator
67
repository: oci://ghcr.io/formancehq/helm
78
version: v2.6.0
8-
digest: sha256:22dbd8e815865ab7efe82156516bdbd48683a1530120677138c7704dfbadf47c
9-
generated: "2025-02-06T13:49:12.33188523Z"
9+
digest: sha256:22d544a8bd745a33a0b3867bdb1422416b17d9a1ecf761b76a83c6b969400f57
10+
generated: "2025-02-06T14:42:03.279397119Z"

charts/regions/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,12 @@ maintainers:
1111
icon: "https://avatars.githubusercontent.com/u/84325077?s=200&v=4"
1212

1313
type: application
14-
version: 2.8.4
14+
version: 2.9.4
1515
appVersion: "latest"
1616

1717
dependencies:
1818
- name: agent
19-
version: 2.X
19+
version: 2.5.0
2020
repository: "file://../agent"
2121
condition: agent.enabled
2222
- name: operator

charts/regions/README.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# regions
22

3-
![Version: 2.8.4](https://img.shields.io/badge/Version-2.8.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
3+
![Version: 2.9.4](https://img.shields.io/badge/Version-2.9.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
44

55
Formance Private Regions Helm Chart
66

@@ -21,7 +21,7 @@ Formance Private Regions Helm Chart
2121

2222
| Repository | Name | Version |
2323
|------------|------|---------|
24-
| file://../agent | agent | 2.X |
24+
| file://../agent | agent | 2.5.0 |
2525
| oci://ghcr.io/formancehq/helm | operator | v2.6.0 |
2626

2727
## Values
@@ -121,9 +121,10 @@ Formance Private Regions Helm Chart
121121
| agent.affinity | object | `{}` | |
122122
| agent.agent.authentication.clientID | string | `""` | |
123123
| agent.agent.authentication.clientSecret | string | `""` | |
124-
| agent.agent.authentication.existingSecretToken | string | `""` | |
124+
| agent.agent.authentication.existingSecret | string | `""` | |
125125
| agent.agent.authentication.issuer | string | `"https://app.formance.cloud/api"` | |
126126
| agent.agent.authentication.mode | string | `"bearer"` | |
127+
| agent.agent.authentication.secretKeys.secret | string | `""` | |
127128
| agent.agent.baseUrl | string | `""` | |
128129
| agent.agent.id | string | `"b7549a16-f74a-4815-ab1e-bb8ef1c3833b"` | |
129130
| agent.agent.outdated | bool | `false` | Any region: - this flag is sync by the server - it will mark the associated region as outdated and will block any new Creation/Enable/Restore |

0 commit comments

Comments
 (0)