Use webhook secrets from files (#3177)

Instead of relying on the config to set them. Relates to: stacklok/infra#954
mindersec · Apr 29, 2024 · 0f68185 · 0f68185
1 parent 41218d3
commit 0f68185
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/deployment/helm/templates/deployment.yaml b/deployment/helm/templates/deployment.yaml
@@ -83,6 +83,10 @@ spec:
             value: "/secrets/github-app/github_app_fallback_token"
           - name: "MINDER_FLAGS_GO_FEATURE_FILE_PATH"
             value: "/flags/flags-config.yaml"
+          - name: "MINDER_WEBHOOK_CONFIG_WEBHOOK_SECRET_FILE"
+            value: "/secrets/app/repo_webhook_secret"
+          - name: "MINDER_WEBHOOK_CONFIG_PREVIOUS_WEBHOOK_SECRET_FILE"
+            value: "/secrets/app/repo_fallback_webhook_secret"
           {{- if .Values.deploymentSettings.extraEnv }}
           {{- toYaml .Values.deploymentSettings.extraEnv | nindent 10 }}
           {{- end }}