Skip to content

Commit c1dfd6c

Browse files
committed
Add HMAC signature verification env vars
1 parent e3976eb commit c1dfd6c

2 files changed

Lines changed: 14 additions & 0 deletions

File tree

k8s/deployment-api.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,13 @@ spec:
5151
value: "redis://:$(REDIS_PASSWORD)@redis-service:6379/0"
5252
- name: CONTEXT_URL
5353
value: "http://api-gateway-service:5000/ngsi-ld-context.json"
54+
- name: REQUIRE_HMAC_SIGNATURE
55+
value: "true"
56+
- name: HMAC_SECRET
57+
valueFrom:
58+
secretKeyRef:
59+
name: jwt-secret
60+
key: secret
5461
resources:
5562
requests:
5663
cpu: 100m

k8s/deployment-worker.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,13 @@ spec:
4848
value: "http://minio-service:9000"
4949
- name: CONTEXT_URL
5050
value: "http://api-gateway-service:5000/ngsi-ld-context.json"
51+
- name: REQUIRE_HMAC_SIGNATURE
52+
value: "true"
53+
- name: HMAC_SECRET
54+
valueFrom:
55+
secretKeyRef:
56+
name: jwt-secret
57+
key: secret
5158
- name: SOIL_DEFAULT_TENANT
5259
value: "platform"
5360
# Platform DB for dynamic tenant discovery (tenant_installed_modules).

0 commit comments

Comments
 (0)