Skip to content

Commit d1b0f2b

Browse files
github-actions[bot]github-actions[bot]
committed
chore: sync from governance-studio-infrastructure @ 6a19bba
Updated: charts docs/auth0 docs/entra docs/keycloak govctl Source: eqtylab/governance-studio-infrastructure@6a19bba
1 parent 6349d8b commit d1b0f2b

22 files changed

Lines changed: 9 additions & 209 deletions

‎charts/governance-platform/README.md‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -330,7 +330,6 @@ Centralized secret configuration for all platform components:
330330
| global.secrets.keyManagement.aws_kms.secretName | string | `"platform-aws-kms"` | AWS KMS credentials secret name |
331331
| global.secrets.keyManagement.azure_key_vault.secretName | string | `"platform-azure-key-vault"` | Azure Key Vault credentials secret name |
332332
| global.secrets.keyManagement.gcp_kms.secretName | string | `"platform-gcp-kms"` | GCP KMS credentials secret name |
333-
| global.secrets.encryption.secretName | string | `"platform-encryption-key"` | Platform encryption key secret name |
334333
| global.secrets.authService.secretName | string | `"platform-auth-service"` | Auth service secrets (session, JWT, API keys) |
335334
| global.secrets.governanceWorker.secretName | string | `"platform-governance-worker"` | Governance worker credentials secret name |
336335
| global.secrets.imageRegistry.secretName | string | `"platform-image-pull-secret"` | Container registry credentials secret name |

‎charts/governance-platform/examples/secrets-sample.yaml‎

Lines changed: 0 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -156,15 +156,6 @@ global:
156156
# ...
157157
# }
158158

159-
# =========================================================================
160-
# PLATFORM ENCRYPTION
161-
# =========================================================================
162-
# Used by: governance-service for encrypting credential data in the database
163-
encryption:
164-
secretName: "platform-encryption-key"
165-
values:
166-
key: "REPLACE_WITH_ENCRYPTION_KEY" # Generate: openssl rand -base64 32
167-
168159
# =========================================================================
169160
# GOVERNANCE WORKER CREDENTIALS
170161
# =========================================================================
@@ -280,11 +271,6 @@ global:
280271
# --from-literal=service-account-json="$(cat gcp-service-account.json)" \
281272
# --namespace governance
282273
#
283-
# # Encryption Key Credentials
284-
# kubectl create secret generic platform-encryption-key \
285-
# --from-literal=encryption-key="$(openssl rand -base64 32)" \
286-
# --namespace governance
287-
#
288274
# # Governance Worker Credentials
289275
# kubectl create secret generic platform-governance-worker \
290276
# --from-literal=encryption-key="$(openssl rand -base64 32)" \

‎charts/governance-platform/examples/values-auth0.yaml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -331,11 +331,6 @@ postgresql:
331331
# --from-literal=service-account-json="$(cat gcp-service-account.json)" \
332332
# --namespace governance
333333
#
334-
# # Encryption Key Credentials
335-
# kubectl create secret generic platform-encryption-key \
336-
# --from-literal=encryption-key="$(openssl rand -base64 32)" \
337-
# --namespace governance
338-
#
339334
# # Governance Worker Credentials
340335
# kubectl create secret generic platform-governance-worker \
341336
# --from-literal=encryption-key="$(openssl rand -base64 32)" \

‎charts/governance-platform/examples/values-entra.yaml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -346,11 +346,6 @@ entra:
346346
# --from-literal=service-account-json="$(cat gcp-service-account.json)" \
347347
# --namespace governance
348348
#
349-
# # Encryption Key Credentials
350-
# kubectl create secret generic platform-encryption-key \
351-
# --from-literal=encryption-key="$(openssl rand -base64 32)" \
352-
# --namespace governance
353-
#
354349
# # Governance Worker Credentials
355350
# kubectl create secret generic platform-governance-worker \
356351
# --from-literal=encryption-key="$(openssl rand -base64 32)" \

‎charts/governance-platform/examples/values-keycloak.yaml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -350,11 +350,6 @@ keycloak:
350350
# --from-literal=service-account-json="$(cat gcp-service-account.json)" \
351351
# --namespace governance
352352
#
353-
# # Encryption Key Credentials
354-
# kubectl create secret generic platform-encryption-key \
355-
# --from-literal=encryption-key="$(openssl rand -base64 32)" \
356-
# --namespace governance
357-
#
358353
# # Governance Worker Credentials
359354
# kubectl create secret generic platform-governance-worker \
360355
# --from-literal=encryption-key="$(openssl rand -base64 32)" \

‎charts/governance-platform/templates/NOTES.txt‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -174,7 +174,6 @@ Revision: {{ .Release.Revision }}
174174
✓ Secrets automatically created by this chart:
175175
- platform-database (PostgreSQL credentials)
176176
- platform-auth0 (Auth0 credentials)
177-
- platform-encryption-key (Platform encryption key)
178177
- platform-gcs (Google Cloud Storage credentials)
179178
- platform-image-pull-secret (Container registry credentials)
180179
- platform-auth-service (Auth service application secrets)

‎charts/governance-platform/templates/secrets/encryption.yaml‎

Lines changed: 0 additions & 23 deletions
This file was deleted.

‎charts/governance-platform/values.yaml‎

Lines changed: 0 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -217,19 +217,6 @@ global:
217217
# @default -- `""` (REQUIRED if create=true)
218218
password: ""
219219

220-
# -- Platform Encryption
221-
# @default -- See values below
222-
# Used by: governance-service for encrypting credential data in the database
223-
encryption:
224-
secretName: "platform-encryption-key"
225-
keys:
226-
key: "encryption-key"
227-
# Only used if create=true
228-
values:
229-
# -- Encryption Key
230-
# @default -- `""` (REQUIRED if create=true, generate with: openssl rand -base64 32)
231-
key: ""
232-
233220
# -- Governance Worker Credentials
234221
# @default -- See values below
235222
# Used by: auth-service for managing the governance worker's service account credentials
@@ -1770,13 +1757,6 @@ governance-service:
17701757
# -- Secrets Configuration
17711758
# @default -- See values below
17721759
secrets:
1773-
# -- Encryption Secret
1774-
# @default -- See values below
1775-
encryption:
1776-
# -- Secret Name
1777-
# @default -- `""` (auto-configured from global.secrets.encryption.secretName)
1778-
name: ""
1779-
17801760
# -- Auth Provider Secrets
17811761
# @default -- See values below
17821762
# Only configure the section matching your auth provider
@@ -1869,10 +1849,6 @@ governance-service:
18691849
# Paths to skip in logs (prefix match)
18701850
skipPaths: "/health"
18711851

1872-
# -- Credential Encryption Key
1873-
# @default -- `""` (auto-configured from global.secrets.encryption)
1874-
credentialEncryptionKey: ""
1875-
18761852
# ---------------------------------------------------------------------------
18771853
# HTTP Server Configuration
18781854
# ---------------------------------------------------------------------------

‎charts/governance-service/README.md‎

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -218,7 +218,6 @@ From global values:
218218

219219
- Database connection (host, port, credentials from `global.postgresql.*` and `global.secrets.database`)
220220
- Auth provider configuration (from `global.secrets.auth.provider`)
221-
- Encryption keys (from `global.secrets.encryption`)
222221
- Storage credentials (from `global.secrets.storage.*`)
223222
- Auth service credentials for worker authentication (from `global.secrets.authService`)
224223
- Environment type (from `global.environmentType`)
@@ -246,7 +245,6 @@ When deployed via the umbrella chart, these global values are automatically used
246245
| global.postgresql.database | string | PostgreSQL database name |
247246
| global.postgresql.username | string | PostgreSQL username |
248247
| global.secrets.database.secretName | string | Name of database credentials secret |
249-
| global.secrets.encryption.secretName | string | Name of encryption key secret |
250248
| global.secrets.auth.provider | string | Auth provider (auth0, entra, or keycloak) |
251249
| global.secrets.auth.auth0.secretName | string | Auth0 credentials secret name |
252250
| global.secrets.auth.entra.secretName | string | Entra ID credentials secret name |
@@ -374,12 +372,6 @@ When deployed via the umbrella chart, these global values are automatically used
374372

375373
All secret references support global fallbacks when deployed via umbrella chart.
376374

377-
#### Encryption Secret
378-
379-
| Key | Type | Description |
380-
| ----------------------- | ------ | ----------------------------------------------------------------------- |
381-
| secrets.encryption.name | string | Secret name (auto-configured from global.secrets.encryption.secretName) |
382-
383375
#### Auth0 Secret (only used when auth provider is Auth0)
384376

385377
| Key | Type | Description |
@@ -437,7 +429,6 @@ All config values support global fallbacks when deployed via umbrella chart.
437429
| config.logLevel | string | `"info"` | Logging level (debug/info/warn/error) |
438430
| config.logFormat | string | `"json"` | Log output format (json/text/console/pretty) |
439431
| config.skipPaths | string | `"/health"` | Paths to skip in logs (prefix match) |
440-
| config.credentialEncryptionKey | string | `""` | Encryption key (auto-configured from global.secrets.encryption) |
441432

442433
#### HTTP Server Configuration
443434

‎charts/governance-service/templates/deployment.yaml‎

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -311,19 +311,6 @@ spec:
311311
{{- end }}
312312
{{- end }}
313313

314-
# ========================================================================
315-
# Encryption Configuration
316-
# ========================================================================
317-
- name: CREDENTIAL_ENCRYPTION_KEY
318-
{{- if .Values.config.credentialEncryptionKey }}
319-
value: {{ .Values.config.credentialEncryptionKey | quote }}
320-
{{- else }}
321-
valueFrom:
322-
secretKeyRef:
323-
name: {{ .Values.secrets.encryption.name | default (((.Values.global).secrets).encryption).secretName | default "" | quote }}
324-
key: {{ ((((.Values.global).secrets).encryption).keys).key | default "encryption-key" | quote }}
325-
{{- end }}
326-
327314
# ========================================================================
328315
# Integration URLs
329316
# ========================================================================

0 commit comments

Comments
 (0)