fix(calendar): remove hardcoded api key and inject via env var

TineoC · TineoC · commit 71e96f060753 · 2026-01-16T15:03:33.000-05:00
- Removes the hardcoded Google Calendar API key from JS. - Injects the key via 'GOOGLE_CALENDAR_API_KEY' environment variable. - Adds a fallback to 'site.Params.google_calendar_api_key' in hugo.yaml. - Sets a default 'PLACEHOLDER_VALUE' in hugo.yaml. - Implements graceful degradation: if the key is missing or is the placeholder, the calendar displays a 'not available' message instead of crashing. Closes #45
diff --git a/hugo.yaml b/hugo.yaml
@@ -66,6 +66,7 @@ frontmatter:
 
 # Everything below this are Site Params
 params:
+  google_calendar_api_key: 'PLACEHOLDER_VALUE'
   # This is used instead of the built-in top level `copyright` to utilize
   # Docsy's partial which adds the copyright year automatically
   copyright: The Kubernetes Authors
diff --git a/layouts/calendar/baseof.html b/layouts/calendar/baseof.html
@@ -6,7 +6,8 @@
     <script src='{{ .Site.BaseURL }}/js/fullcalendar/main.min.js'></script>
     <script src='{{ .Site.BaseURL }}/js/calendar.js'></script>
     <script>
-      renderCalendar();
+      {{ $apiKey := getenv "GOOGLE_CALENDAR_API_KEY" | default .Site.Params.google_calendar_api_key | default "" }}
+      renderCalendar('{{ $apiKey }}');
     </script>
   </head>
   <body class="td-{{ .Kind }}{{ with .Page.Params.body_class }} {{ . }}{{ end }}">
diff --git a/static/js/calendar.js b/static/js/calendar.js
@@ -4,11 +4,18 @@ function openEvent(event) {
     return false;
   };
 
-function renderCalendar() {
+function renderCalendar(apiKey) {
   document.addEventListener('DOMContentLoaded', function() {
     var calendarEl = document.getElementById('calendar');
+    
+    if (!apiKey || apiKey === 'PLACEHOLDER_VALUE') {
+      console.warn('Google Calendar API key is missing. Calendar will not render.');
+      calendarEl.innerHTML = '<div style="padding: 20px; border: 1px solid #ccc; background: #f9f9f9; text-align: center;">Community Calendar is not available in this environment (missing API Key).</div>';
+      return;
+    }
+
     var calendar = new FullCalendar.Calendar(calendarEl, {
-      googleCalendarApiKey: 'AIzaSyDn_UhFPLDgxouI5nc8hOULFY25EjwGR44',
+      googleCalendarApiKey: apiKey,
       events: {
         googleCalendarId: 'calendar@kubernetes.io'
       },
