feat(SecretManagement): migrate secrets to AWS SM

Author: sofiasimdianova

README.md

@@ -4,7 +4,7 @@
 
 | Readme | Chart Version | App Version | Description | Hub |
 |--------|---------------|-------------|-------------|-----|
-| [Agent](./charts/agent/README.md) | 2.4.1 | v2.2.0 | Formance Membership Agent Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/agent)](https://artifacthub.io/packages/search?repo=agent) |
+| [Agent](./charts/agent/README.md) | 2.5.0 | v2.2.0 | Formance Membership Agent Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/agent)](https://artifacthub.io/packages/search?repo=agent) |
 | [Cloudprem](./charts/cloudprem/README.md) | 3.0.0-rc.10 | v1.1.0 | Formance control-plane | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem) |
 | [Console](./charts/console/README.md) | 2.0.1 | console-on.v1.0.2 | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console)](https://artifacthub.io/packages/search?repo=console) |
 | [Console-V3](./charts/console-v3/README.md) | 2.0.3 | 5e7b404a3a208b1f38603719e02a8b1883c10acf | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console-v3)](https://artifacthub.io/packages/search?repo=console-v3) |

charts/agent/Chart.yaml

@@ -10,7 +10,7 @@ maintainers:
 icon: "https://avatars.githubusercontent.com/u/84325077?s=200&v=4"
 
 type: application
-version: 2.4.1
+version: 2.5.0
 
 appVersion: "v2.2.0"
 

charts/agent/README.md

@@ -1,6 +1,6 @@
 # agent
 
-![Version: 2.4.1](https://img.shields.io/badge/Version-2.4.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.0](https://img.shields.io/badge/AppVersion-v2.2.0-informational?style=flat-square)
+![Version: 2.5.0](https://img.shields.io/badge/Version-2.5.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.0](https://img.shields.io/badge/AppVersion-v2.2.0-informational?style=flat-square)
 
 Formance Membership Agent Helm Chart
 
@@ -47,6 +47,7 @@ Formance Membership Agent Helm Chart
 | affinity | object | `{}` |  |
 | agent.authentication.clientID | string | `""` |  |
 | agent.authentication.clientSecret | string | `""` |  |
+| agent.authentication.existingSecretToken | string | `""` |  |
 | agent.authentication.issuer | string | `"https://app.formance.cloud/api"` |  |
 | agent.authentication.mode | string | `"bearer"` |  |
 | agent.baseUrl | string | `""` |  |

charts/agent/templates/_helpers.tpl

@@ -26,7 +26,14 @@ app.kubernetes.io/instance: {{ .Release.Name }}
   value: "{{ .Values.agent.authentication.mode }}"
 {{- if eq .Values.agent.authentication.mode "token" }}
 - name: AUTHENTICATION_TOKEN
-  value: "{{ .Values.agent.authentication.token }}"
+  {{- if gt (len .Values.agent.authentication.existingSecretToken) 0 }}
+  valueFrom:
+    secretKeyRef:
+      name: {{ .Values.agent.authentication.existingSecretToken }}
+      key: "token"
+  {{- else }}
+  value: {{ .Values.agent.authentication.token }}
+  {{- end }}
 {{- end }}
 {{- if eq .Values.agent.authentication.mode "bearer" }}
 - name: AUTHENTICATION_ISSUER

charts/agent/values.schema.json

@@ -15,6 +15,9 @@
                         "clientSecret": {
                             "type": "string"
                         },
+                        "existingSecretToken": {
+                            "type": "string"
+                        },
                         "issuer": {
                             "type": "string"
                         },

charts/agent/values.yaml

@@ -109,6 +109,7 @@ agent:
     issuer: https://app.formance.cloud/api
     clientID: ""
     clientSecret: ""
+    existingSecretToken: ""
 
     # -- Public Region
     # mode: token

charts/regions/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: agent
   repository: file://../agent
-  version: 2.4.1
+  version: 2.5.0
 - name: operator
   repository: oci://ghcr.io/formancehq/helm
   version: v2.6.0
-digest: sha256:72eccae222d27466817cb2dedb8cacbce157ae43255d79fc194ad4fe99133830
-generated: "2025-02-05T11:19:12.47191+01:00"
+digest: sha256:22dbd8e815865ab7efe82156516bdbd48683a1530120677138c7704dfbadf47c
+generated: "2025-02-06T13:49:12.33188523Z"

charts/regions/README.md

@@ -121,6 +121,7 @@ Formance Private Regions Helm Chart
 | agent.affinity | object | `{}` |  |
 | agent.agent.authentication.clientID | string | `""` |  |
 | agent.agent.authentication.clientSecret | string | `""` |  |
+| agent.agent.authentication.existingSecretToken | string | `""` |  |
 | agent.agent.authentication.issuer | string | `"https://app.formance.cloud/api"` |  |
 | agent.agent.authentication.mode | string | `"bearer"` |  |
 | agent.agent.baseUrl | string | `""` |  |