From e768b402c8a7a2a624798773b41286b598d81d86 Mon Sep 17 00:00:00 2001 From: Dhirender Singh Date: Tue, 28 Jan 2025 10:58:28 +0530 Subject: [PATCH] fix(Auto-setup): added encryption key for auto setup auth --- .../deployment-backend-administration.yaml | 13 +++++++++++++ charts/portal/values.yaml | 9 +++++++++ 2 files changed, 22 insertions(+) diff --git a/charts/portal/templates/deployment-backend-administration.yaml b/charts/portal/templates/deployment-backend-administration.yaml index a24905f5..93a7b19e 100644 --- a/charts/portal/templates/deployment-backend-administration.yaml +++ b/charts/portal/templates/deployment-backend-administration.yaml @@ -511,6 +511,19 @@ spec: value: "{{ .Values.backend.processesworker.mailing.encryptionConfigs.index0.paddingMode }}" - name: "BPNACCESS__BASEADDRESS" value: "{{ .Values.bpdm.poolAddress }}{{ .Values.bpdm.poolApiPath }}" + - name: "OFFERPROVIDER__ENCRYPTIONCONFIGINDEX" + value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigIndex }}" + - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__INDEX" + value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigs.index0.index}}" + - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__CIPHERMODE" + value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigs.index0.cipherMode}}" + - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__PADDINGMODE" + value: "{{ .Values.backend.processesworker.offerprovider.encryptionConfigs.index0.paddingMode}}" + - name: "OFFERPROVIDER__ENCRYPTIONCONFIGS__0__ENCRYPTIONKEY" + valueFrom: + secretKeyRef: + name: "{{ .Values.backend.interfaces.secret }}" + key: "offerprovider-encryption-key0" ports: - name: http containerPort: {{ .Values.portContainer }} diff --git a/charts/portal/values.yaml b/charts/portal/values.yaml index 8293430f..6f4db223 100644 --- a/charts/portal/values.yaml +++ b/charts/portal/values.yaml @@ -908,6 +908,15 @@ backend: clientId: "offerprovider-client-id" # -- Client-secret for offer provider client-id. Secret-key 'offerprovider-client-secret'. clientSecret: "" + encryptionConfigIndex: 0 + encryptionConfigs: + index0: + index: 0 + cipherMode: "CBC" + paddingMode: "PKCS7" + # -- EncryptionKey for offer provider auto setup authentication. Secret-key 'offerprovider-encryption-key0'. + # Expected format is 256 bit (64 digits) hex. + encryptionKey: "" processIdentity: processUserId: d21d2e8a-fe35-483c-b2b8-4100ed7f0953 onboardingServiceProvider: