From af950002aa34abd2d0c959029b5632f5f7f79f39 Mon Sep 17 00:00:00 2001 From: JD Robertson <44848933+JD-Robertson@users.noreply.github.com> Date: Fri, 17 Mar 2023 14:42:55 -0500 Subject: [PATCH] Add userservices continuation token secret (#124) * Add userservices continuation token secret * Update getting-started/templates/systemlink-secrets.yaml Co-authored-by: Melissa Hilliard <63749096+MelissaHilliard@users.noreply.github.com> * Update getting-started/templates/systemlink-secrets.yaml Co-authored-by: Melissa Hilliard <63749096+MelissaHilliard@users.noreply.github.com> * Update getting-started/templates/systemlink-secrets.yaml Co-authored-by: Melissa Hilliard <63749096+MelissaHilliard@users.noreply.github.com> --------- Co-authored-by: Melissa Hilliard <63749096+MelissaHilliard@users.noreply.github.com> --- getting-started/templates/systemlink-secrets.yaml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/getting-started/templates/systemlink-secrets.yaml b/getting-started/templates/systemlink-secrets.yaml index 381ae2d4..30b75c24 100644 --- a/getting-started/templates/systemlink-secrets.yaml +++ b/getting-started/templates/systemlink-secrets.yaml @@ -106,10 +106,13 @@ userservices: ## Refer to the MongoDB documentation for key generation: https://www.mongodb.com/docs/manual/tutorial/enforce-keyfile-access-control-in-existing-replica-set/#create-a-keyfile ## replicaSetKey: "" # - ## A list of API keys. These keys are used to authorize service-to-service interactions within the application. - ## Each entry must provide the name of the service assigned this key, the key, and a SHA-512 hash of the key. - ## More information can be found at: https://github.com/ni/install-systemlink-enterprise/blob/main/getting-started/secrets.md - ## + ## Cryptographic key used for AEAD encryption of continuation tokens. Use a 32-byte cryptographically random value which is base64 encoded. + ## + continuationTokenEncryptionKey: "" # + ## A list of API keys. SystemLink uses these keys to authorize service-to-service interactions within the application. + ## Each entry must provide the key, the name of the assigned service, and a SHA-512 hash of the key. + ## For more information visit https://github.com/ni/install-systemlink-enterprise/blob/main/getting-started/secrets.md + ## whitelistedApiKeys: # - serviceName: "assetservice" key: ""