Merge pull request #568 from danskernesdigitalebibliotek/DDFBRA-328-f…

…a-styr-pa-env-variabler-i-lagoon-inden-release-i-naeste-uge-uge-3 Ensure consumer passwords and secrets in projects
danskernesdigitalebibliotek · Jan 9, 2025 · 5d45bcd · 5d45bcd
2 parents 7b305e1 + 8d48715
commit 5d45bcd
Showing 1 changed file with 37 additions and 0 deletions.
diff --git a/infrastructure/Taskfile.yml b/infrastructure/Taskfile.yml
@@ -718,6 +718,40 @@ tasks:
       - sh: "[ ! -z \"{{.PROJECT_NAME}}\" ]"
         msg: "Missing PROJECT_NAME"
 
+    lagoon:project:ensure:consumer-secrets-n-passwords:
+      cmds:
+      - task: lagoon:ensure:environment-variable
+        vars:
+          VARIABLE_NAME: "BNF_GRAPHQL_CONSUMER_SECRET"
+          PROJECT_NAME: "{{.PROJECT_NAME}}"
+          VARIABLE_SCOPE: "RUNTIME"
+          # TODO: The variable values should be generated and stored in a secret manager.
+          VARIABLE_VALUE: "foo"
+      - task: lagoon:ensure:environment-variable
+        vars:
+          VARIABLE_NAME: "BNF_GRAPHQL_CONSUMER_USER_PASSWORD"
+          PROJECT_NAME: "{{.PROJECT_NAME}}"
+          VARIABLE_SCOPE: "RUNTIME"
+          # TODO: The variable values should be generated and stored in a secret manager.
+          VARIABLE_VALUE: "foo"
+      - task: lagoon:ensure:environment-variable
+        vars:
+          VARIABLE_NAME: "GO_GRAPHQL_CONSUMER_SECRET"
+          PROJECT_NAME: "{{.PROJECT_NAME}}"
+          VARIABLE_SCOPE: "RUNTIME"
+          # TODO: The variable values should be generated and stored in a secret manager.
+          VARIABLE_VALUE: "foo"
+      - task: lagoon:ensure:environment-variable
+        vars:
+          VARIABLE_NAME: "GO_GRAPHQL_CONSUMER_USER_PASSWORD"
+          PROJECT_NAME: "{{.PROJECT_NAME}}"
+          VARIABLE_SCOPE: "RUNTIME"
+          # TODO: The variable values should be generated and stored in a secret manager.
+          VARIABLE_VALUE: "foo"
+      preconditions:
+      - sh: "[ ! -z \"{{.PROJECT_NAME}}\" ]"
+        msg: "Missing PROJECT_NAME"
+
     lagoon:add:cluster:
       deps: [cluster:auth]
       desc: Add a Kubernetes cluster (Lagoon Remote) to the Lagoon Core.
@@ -801,6 +835,9 @@ tasks:
         - task: lagoon:project:ensure:azure-mail-connection-string
           vars:
             PROJECT_NAME: "{{.PROJECT_NAME}}"
+        - task: lagoon:project:ensure:consumer-secrets-n-passwords
+          vars:
+            PROJECT_NAME: "{{.PROJECT_NAME}}"
       preconditions:
       - sh: "[ ! -z {{.GIT_URL}} ]"
         msg: "Env variable GIT_URL is not set or empty."