fix(Auto-setup): added encryption key for auto setup auth

eclipse-tractusx · Jan 28, 2025 · e768b40 · e768b40
1 parent e953c3d
commit e768b40
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/charts/portal/templates/deployment-backend-administration.yaml b/charts/portal/templates/deployment-backend-administration.yaml
@@ -511,6 +511,19 @@ spec:
           value: "{{ .Values.backend.processesworker.mailing.encryptionConfigs.index0.paddingMode }}"
         - name: "BPNACCESS__BASEADDRESS"
           value: "{{ .Values.bpdm.poolAddress }}{{ .Values.bpdm.poolApiPath }}"
+        - name: "OFFERPROVIDER__ENCRYPTIONCONFIGINDEX"
+          value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigIndex }}"
+        - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__INDEX"
+          value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigs.index0.index}}"
+        - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__CIPHERMODE"
+          value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigs.index0.cipherMode}}"
+        - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__PADDINGMODE"
+          value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigs.index0.paddingMode}}"
+        - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__ENCRYPTIONKEY"
+          valueFrom:
+            secretKeyRef:
+              name: "{{ .Values.backend.interfaces.secret }}"
+              key: "offerprovider-encryption-key0"
         ports:
         - name: http
           containerPort: {{ .Values.portContainer }}

diff --git a/charts/portal/values.yaml b/charts/portal/values.yaml
@@ -908,6 +908,15 @@ backend:
       clientId: "offerprovider-client-id"
       # -- Client-secret for offer provider client-id. Secret-key 'offerprovider-client-secret'.
       clientSecret: ""
+      encryptionConfigIndex: 0
+      encryptionConfigs:
+        index0:
+          index: 0
+          cipherMode: "CBC"
+          paddingMode: "PKCS7"
+          # -- EncryptionKey for offer provider auto setup authentication. Secret-key 'offerprovider-encryption-key0'.
+          # Expected format is 256 bit (64 digits) hex.
+          encryptionKey: ""
     processIdentity:
       processUserId: d21d2e8a-fe35-483c-b2b8-4100ed7f0953
     onboardingServiceProvider: