Skip to content

Commit e5e09f5

Browse files
sofiasimdianovasofiasimdianova
committed
feat(SecretManagement): migrate secrets to AWS SM
1 parent f64bf16 commit e5e09f5

File tree

9 files changed

+39
-12
lines changed

9 files changed

+39
-12
lines changed

‎README.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,15 @@
44

55
| Readme | Chart Version | App Version | Description | Hub |
66
|--------|---------------|-------------|-------------|-----|
7-
| [Agent](./charts/agent/README.md) | 2.4.1 | v2.2.0 | Formance Membership Agent Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/agent)](https://artifacthub.io/packages/search?repo=agent) |
7+
| [Agent](./charts/agent/README.md) | 2.5.0 | v2.2.0 | Formance Membership Agent Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/agent)](https://artifacthub.io/packages/search?repo=agent) |
88
| [Cloudprem](./charts/cloudprem/README.md) | 3.0.0-rc.10 | v1.1.0 | Formance control-plane | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem) |
99
| [Console](./charts/console/README.md) | 2.0.1 | console-on.v1.0.2 | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console)](https://artifacthub.io/packages/search?repo=console) |
1010
| [Console-V3](./charts/console-v3/README.md) | 2.0.3 | 5e7b404a3a208b1f38603719e02a8b1883c10acf | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console-v3)](https://artifacthub.io/packages/search?repo=console-v3) |
1111
| [Core](./charts/core/README.md) | 1.1.1 | latest | Formance Core Library | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/core)](https://artifacthub.io/packages/search?repo=core) |
1212
| [Demo](./charts/demo/README.md) | 2.1.0 | latest | Formance Private Regions Demo | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/demo)](https://artifacthub.io/packages/search?repo=demo) |
1313
| [Membership](./charts/membership/README.md) | 2.2.1 | v1.1.0 | Formance Membership API. Manage stacks, organizations, regions, invitations, users, roles, and permissions. | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/membership)](https://artifacthub.io/packages/search?repo=membership) |
1414
| [Portal](./charts/portal/README.md) | 2.0.5 | 5e7b404a3a208b1f38603719e02a8b1883c10acf | Formance Portal | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/portal)](https://artifacthub.io/packages/search?repo=portal) |
15-
| [Regions](./charts/regions/README.md) | 2.8.4 | latest | Formance Private Regions Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/regions)](https://artifacthub.io/packages/search?repo=regions) |
15+
| [Regions](./charts/regions/README.md) | 2.9.4 | latest | Formance Private Regions Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/regions)](https://artifacthub.io/packages/search?repo=regions) |
1616
| [Stargate](./charts/stargate/README.md) | 0.6.1 | latest | Formance Stargate gRPC Gateway | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/stargate)](https://artifacthub.io/packages/search?repo=stargate) |
1717

1818
## How to contribute

‎charts/agent/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ maintainers:
1010
icon: "https://avatars.githubusercontent.com/u/84325077?s=200&v=4"
1111

1212
type: application
13-
version: 2.4.1
13+
version: 2.5.0
1414

1515
appVersion: "v2.2.0"
1616

‎charts/agent/README.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# agent
22

3-
![Version: 2.4.1](https://img.shields.io/badge/Version-2.4.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.0](https://img.shields.io/badge/AppVersion-v2.2.0-informational?style=flat-square)
3+
![Version: 2.5.0](https://img.shields.io/badge/Version-2.5.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.0](https://img.shields.io/badge/AppVersion-v2.2.0-informational?style=flat-square)
44

55
Formance Membership Agent Helm Chart
66

@@ -47,8 +47,10 @@ Formance Membership Agent Helm Chart
4747
| affinity | object | `{}` | |
4848
| agent.authentication.clientID | string | `""` | |
4949
| agent.authentication.clientSecret | string | `""` | |
50+
| agent.authentication.existingSecret | string | `""` | |
5051
| agent.authentication.issuer | string | `"https://app.formance.cloud/api"` | |
5152
| agent.authentication.mode | string | `"bearer"` | |
53+
| agent.authentication.secretKeys.secret | string | `""` | |
5254
| agent.baseUrl | string | `""` | |
5355
| agent.id | string | `"b7549a16-f74a-4815-ab1e-bb8ef1c3833b"` | |
5456
| agent.outdated | bool | `false` | Any region: - this flag is sync by the server - it will mark the associated region as outdated and will block any new Creation/Enable/Restore |

‎charts/agent/templates/_helpers.tpl‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,14 @@ app.kubernetes.io/instance: {{ .Release.Name }}
2626
value: "{{ .Values.agent.authentication.mode }}"
2727
{{- if eq .Values.agent.authentication.mode "token" }}
2828
- name: AUTHENTICATION_TOKEN
29-
value: "{{ .Values.agent.authentication.token }}"
29+
{{- if gt (len .Values.agent.authentication.existingSecretToken) 0 }}
30+
valueFrom:
31+
secretKeyRef:
32+
name: {{ .Values.agent.authentication.existingSecret }}
33+
key: {{ .Values.agent.authentication.secretKeys.secret | default "token" }}
34+
{{- else }}
35+
value: {{ .Values.agent.authentication.token }}
36+
{{- end }}
3037
{{- end }}
3138
{{- if eq .Values.agent.authentication.mode "bearer" }}
3239
- name: AUTHENTICATION_ISSUER

‎charts/agent/values.schema.json‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,22 @@
1515
"clientSecret": {
1616
"type": "string"
1717
},
18+
"existingSecret": {
19+
"type": "string"
20+
},
1821
"issuer": {
1922
"type": "string"
2023
},
2124
"mode": {
2225
"type": "string"
26+
},
27+
"secretKeys": {
28+
"properties": {
29+
"secret": {
30+
"type": "string"
31+
}
32+
},
33+
"type": "object"
2334
}
2435
},
2536
"type": "object"

‎charts/agent/values.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,10 @@ agent:
109109
issuer: https://app.formance.cloud/api
110110
clientID: ""
111111
clientSecret: ""
112+
existingSecret: ""
113+
secretKeys:
114+
secret: ""
115+
112116

113117
# -- Public Region
114118
# mode: token

‎charts/regions/Chart.lock‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,10 @@
11
dependencies:
22
- name: agent
33
repository: file://../agent
4-
version: 2.4.1
4+
version: 2.5.0
5+
version: 2.5.0
56
- name: operator
67
repository: oci://ghcr.io/formancehq/helm
78
version: v2.6.0
8-
digest: sha256:72eccae222d27466817cb2dedb8cacbce157ae43255d79fc194ad4fe99133830
9-
generated: "2025-02-05T11:19:12.47191+01:00"
9+
digest: sha256:22d544a8bd745a33a0b3867bdb1422416b17d9a1ecf761b76a83c6b969400f57
10+
generated: "2025-02-06T14:42:03.279397119Z"

‎charts/regions/Chart.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,12 @@ maintainers:
1111
icon: "https://avatars.githubusercontent.com/u/84325077?s=200&v=4"
1212

1313
type: application
14-
version: 2.8.4
14+
version: 2.9.4
1515
appVersion: "latest"
1616

1717
dependencies:
1818
- name: agent
19-
version: 2.X
19+
version: 2.5.0
2020
repository: "file://../agent"
2121
condition: agent.enabled
2222
- name: operator

‎charts/regions/README.md‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# regions
22

3-
![Version: 2.8.4](https://img.shields.io/badge/Version-2.8.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
3+
![Version: 2.9.4](https://img.shields.io/badge/Version-2.9.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
44

55
Formance Private Regions Helm Chart
66

@@ -21,7 +21,7 @@ Formance Private Regions Helm Chart
2121

2222
| Repository | Name | Version |
2323
|------------|------|---------|
24-
| file://../agent | agent | 2.X |
24+
| file://../agent | agent | 2.5.0 |
2525
| oci://ghcr.io/formancehq/helm | operator | v2.6.0 |
2626

2727
## Values
@@ -121,8 +121,10 @@ Formance Private Regions Helm Chart
121121
| agent.affinity | object | `{}` | |
122122
| agent.agent.authentication.clientID | string | `""` | |
123123
| agent.agent.authentication.clientSecret | string | `""` | |
124+
| agent.agent.authentication.existingSecret | string | `""` | |
124125
| agent.agent.authentication.issuer | string | `"https://app.formance.cloud/api"` | |
125126
| agent.agent.authentication.mode | string | `"bearer"` | |
127+
| agent.agent.authentication.secretKeys.secret | string | `""` | |
126128
| agent.agent.baseUrl | string | `""` | |
127129
| agent.agent.id | string | `"b7549a16-f74a-4815-ab1e-bb8ef1c3833b"` | |
128130
| agent.agent.outdated | bool | `false` | Any region: - this flag is sync by the server - it will mark the associated region as outdated and will block any new Creation/Enable/Restore |

0 commit comments

Comments
 (0)