Skip to content

Commit bc61de4

Browse files
add provider auth secret to kubernetes and docker yaml
1 parent 4367822 commit bc61de4

File tree

3 files changed

+5
-0
lines changed

3 files changed

+5
-0
lines changed

helm-charts/infisical/templates/backend-deployment.yaml

+1
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,7 @@ stringData:
8282
"JWT_AUTH_SECRET" (randAlphaNum 32 | lower)
8383
"JWT_SERVICE_SECRET" (randAlphaNum 32 | lower)
8484
"JWT_MFA_SECRET" (randAlphaNum 32 | lower)
85+
"JWT_PROVIDER_AUTH_SECRET" (randAlphaNum 32 | lower)
8586
"MONGO_URL" (include "infisical.mongodb.connectionString" .) }}
8687
{{- $secretObj := (lookup "v1" "Secret" .Release.Namespace (include "infisical.backend.fullname" .)) | default dict }}
8788
{{- $secretData := (get $secretObj "data") | default dict }}

helm-charts/infisical/values.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -131,13 +131,15 @@ backendEnvironmentVariables:
131131
## @param backendEnvironmentVariables.JWT_AUTH_SECRET **Required** Secrets to sign JWT tokens (128-bit hex value, 32-characters hex, [example](https://stackoverflow.com/a/34329057))</br><kbd>auto-generated</kbd> variable (if not provided, and not found in an existing secret)
132132
## @param backendEnvironmentVariables.JWT_SERVICE_SECRET **Required** Secrets to sign JWT tokens (128-bit hex value, 32-characters hex, [example](https://stackoverflow.com/a/34329057))</br><kbd>auto-generated</kbd> variable (if not provided, and not found in an existing secret)
133133
## @param backendEnvironmentVariables.JWT_MFA_SECRET **Required** Secrets to sign JWT tokens (128-bit hex value, 32-characters hex, [example](https://stackoverflow.com/a/34329057))</br><kbd>auto-generated</kbd> variable (if not provided, and not found in an existing secret)
134+
## @param backendEnvironmentVariables.JWT_PROVIDER_AUTH_SECRET **Required** Secrets to sign JWT OAuth tokens (128-bit hex value, 32-characters hex, [example](https://stackoverflow.com/a/34329057))</br><kbd>auto-generated</kbd> variable (if not provided, and not found in an existing secret)
134135
## Command to generate the required value (linux) : 'hexdump -vn16 -e'4/4 "%08X" 1 "\n"' /dev/urandom', 'openssl rand -hex 16'
135136
##
136137
JWT_SIGNUP_SECRET: ""
137138
JWT_REFRESH_SECRET: ""
138139
JWT_AUTH_SECRET: ""
139140
JWT_SERVICE_SECRET: ""
140141
JWT_MFA_SECRET: ""
142+
JWT_PROVIDER_AUTH_SECRET: ""
141143
## @param backendEnvironmentVariables.SMTP_HOST **Required** Hostname to connect to for establishing SMTP connections
142144
## @param backendEnvironmentVariables.SMTP_PORT Port to connect to for establishing SMTP connections
143145
## @param backendEnvironmentVariables.SMTP_SECURE If true, use TLS when connecting to host. If false, TLS will be used if STARTTLS is supported

render.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,8 @@ services:
1717
generateValue: true
1818
- key: JWT_AUTH_SECRET
1919
generateValue: true
20+
- key: JWT_PROVIDER_AUTH_SECRET
21+
generateValue: true
2022
- key: MONGO_URL
2123
sync: false
2224
- key: PORT

0 commit comments

Comments
 (0)