feat(bdrs): add custom bpndidresolver token address

Ref: #456
eclipse-tractusx · Nov 5, 2024 · c0bce17 · c0bce17
1 parent 15417ab
commit c0bce17
Show file tree

Hide file tree

Showing 6 changed files with 33 additions and 0 deletions.
diff --git a/charts/localdev/values.yaml b/charts/localdev/values.yaml
@@ -182,6 +182,11 @@ portal:
       bpnDidResolver:
         # -- ApiKey for management endpoint of the bpnDidResolver. Secret-key 'bpndidresolver-api-key'.
         apiKey: ""
+        # -- Auth settings of the bpnDidResolver
+        grantType: "client_credentials"
+        clientId: ""
+        clientSecret: ""
+        scope: "openid"
       onboardingServiceProvider:
         encryptionConfigs:
           index0:

diff --git a/charts/portal/templates/cronjob-backend-processes.yaml b/charts/portal/templates/cronjob-backend-processes.yaml
@@ -295,6 +295,23 @@ spec:
                 secretKeyRef:
                   name: "{{ .Values.backend.interfaces.secret }}"
                   key: "bpndidresolver-api-key"
+            - name: "BPNDIDRESOLVER__USERNAME"
+              value: "{{ .Values.backend.placeholder }}"
+            - name: "BPNDIDRESOLVER__PASSWORD"
+              value: "{{ .Values.backend.placeholder }}"
+            - name: "BPNDIDRESOLVER__GRANTTYPE"
+              value: "{{ .Values.backend.processesworker.bpnDidResolver.grantType }}"
+            - name: "BPNDIDRESOLVER__CLIENTID"
+              value: "{{ .Values.backend.processesworker.bpnDidResolver.clientId }}"
+            - name: "BPNDIDRESOLVER__CLIENTSECRET"
+              valueFrom:
+                secretKeyRef:
+                  name: "{{ .Values.backend.interfaces.secret }}"
+                  key: "bpndidresolver-client-secret"
+            - name: "BPNDIDRESOLVER__SCOPE"
+              value: "{{ .Values.backend.processesworker.bpnDidResolver.scope }}"
+            - name: "BPNDIDRESOLVER__TOKENADDRESS"
+              value: "{{ .Values.centralidp.address }}{{ .Values.backend.keycloak.central.tokenPath }}"
             - name: "KEYCLOAK__CENTRAL__AUTHREALM"
               value: "{{ .Values.centralidp.realm }}"
             - name: "KEYCLOAK__CENTRAL__CLIENTID"

diff --git a/charts/portal/templates/secret-backend-interfaces.yaml b/charts/portal/templates/secret-backend-interfaces.yaml
@@ -45,6 +45,7 @@ data:
   issuercomponent-client-secret: {{ coalesce ( .Values.backend.processesworker.issuerComponent.clientSecret | b64enc ) ( index $secret.data "issuercomponent-client-secret" ) | default ( randAlphaNum 32 ) | quote }}
   dim-encryption-key0: {{ coalesce ( .Values.backend.processesworker.dim.encryptionConfigs.index0.encryptionKey | b64enc ) ( index $secret.data "dim-encryption-key0" ) | default ( randAlphaNum 32 ) | quote }}
   bpndidresolver-api-key: {{ coalesce ( .Values.backend.processesworker.bpnDidResolver.apiKey | b64enc ) ( index $secret.data "bpndidresolver-api-key" ) | default ( randAlphaNum 32 ) | quote }}
+  bpndidresolver-client-secret: {{ coalesce ( .Values.backend.processesworker.bpnDidResolver.clientSecret | b64enc ) ( index $secret.data "bpndidresolver-client-secret" ) | default ( randAlphaNum 32 ) | quote }}
   serviceaccount-encryption-key0: {{ coalesce ( .Values.backend.administration.serviceAccount.encryptionConfigs.index0.encryptionKey | b64enc ) ( index $secret.data "serviceaccount-encryption-key0" ) | default ( randAlphaNum 32 ) | quote }}
 {{ else -}}
 stringData:
@@ -62,5 +63,6 @@ stringData:
   issuercomponent-client-secret: {{ .Values.backend.processesworker.issuerComponent.clientSecret | default ( randAlphaNum 32 ) | quote }}
   dim-encryption-key0: {{ .Values.backend.processesworker.dim.encryptionConfigs.index0.encryptionKey | default ( randAlphaNum 32 ) | quote }}
   bpndidresolver-api-key: {{ .Values.backend.processesworker.bpnDidResolver.apiKey | default ( randAlphaNum 32 ) | quote }}
+  bpndidresolver-client-secret: {{ .Values.backend.processesworker.bpnDidResolver.clientSecret | default ( randAlphaNum 32 ) | quote }}
   serviceaccount-encryption-key0: {{ .Values.backend.administration.serviceAccount.encryptionConfigs.index0.encryptionKey | default ( randAlphaNum 32 ) | quote }}
 {{ end }}
diff --git a/charts/portal/values.yaml b/charts/portal/values.yaml
@@ -961,6 +961,11 @@ backend:
     bpnDidResolver:
       # -- ApiKey for management endpoint of the bpnDidResolver. Secret-key 'bpndidresolver-api-key'.
       apiKey: ""
+      # -- Auth settings of the bpnDidResolver
+      grantType: "client_credentials"
+      clientId: ""
+      clientSecret: ""
+      scope: "openid"
     invitation:
       invitedUserInitialRoles:
         role0: "Company Admin"

diff --git a/environments/helm-values/values-int.yaml b/environments/helm-values/values-int.yaml
@@ -272,6 +272,8 @@ backend:
       clientSecret: "<path:portal/data/int/iam/centralidp-client-secrets#portal-issuer-sa>"
     bpnDidResolver:
       apiKey: "<path:portal/data/bdrs-mgmt-api-key#content>"
+      clientId: "<path:portal/data/bdrs-mgmt-client-id#bdrsClientId>"
+      clientSecret: "<path:portal/data/bdrs-mgmt-client-secret#bdrsClientSecret>"
     invitation:
       encryptionConfigs:
         index0:

diff --git a/environments/helm-values/values-stable.yaml b/environments/helm-values/values-stable.yaml
@@ -270,6 +270,8 @@ backend:
       clientSecret: "<path:portal/data/stable/iam/centralidp-client-secrets#portal-issuer-sa>"
     bpnDidResolver:
       apiKey: "<path:portal/data/bdrs-mgmt-api-key#content>"
+      clientId: "<path:portal/data/bdrs-mgmt-client-id#bdrsClientId>"
+      clientSecret: "<path:portal/data/bdrs-mgmt-client-secret#bdrsClientSecret>"
     invitation:
       encryptionConfigs:
         index0: