graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: use k8s secret for Stripe env vars instead of hardcoded values

Browse source 
- Changed from hardcoded placeholder values to secretKeyRef
- References towerops-billing secret (with optional: true)
- Won't crash if secret doesn't exist yet
- User can create secret later with real Stripe keys
This commit is contained in:
Graham McIntire 2026-03-06 10:23:55 -06:00
parent 7d2f1fd860
commit 20f05584dc
No known key found for this signature in database
1 changed files with 30 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
k8s/deployment.yaml
View file

@ -67,11 +67,23 @@ spec:
name: towerops-secrets
key: CLOAK_KEY
- name: STRIPE_SECRET_KEY
value: "sk_test_fake_placeholder"
valueFrom:
secretKeyRef:
name: towerops-billing
key: STRIPE_SECRET_KEY
optional: true
- name: STRIPE_WEBHOOK_SECRET
value: "whsec_fake_placeholder"
valueFrom:
secretKeyRef:
name: towerops-billing
key: STRIPE_WEBHOOK_SECRET
optional: true
- name: STRIPE_PRICE_ID
value: "price_fake_placeholder"
valueFrom:
secretKeyRef:
name: towerops-billing
key: STRIPE_PRICE_ID
optional: true
envFrom:
- secretRef:
name: towerops-db
@ -160,11 +172,23 @@ spec:
- name: DATABASE_SSL_VERIFY
value: "false"
- name: STRIPE_SECRET_KEY
value: "sk_test_fake_placeholder"
valueFrom:
secretKeyRef:
name: towerops-billing
key: STRIPE_SECRET_KEY
optional: true
- name: STRIPE_WEBHOOK_SECRET
value: "whsec_fake_placeholder"
valueFrom:
secretKeyRef:
name: towerops-billing
key: STRIPE_WEBHOOK_SECRET
optional: true
- name: STRIPE_PRICE_ID
value: "price_fake_placeholder"
valueFrom:
secretKeyRef:
name: towerops-billing
key: STRIPE_PRICE_ID
optional: true
envFrom:
# Redis connection configured via towerops-redis secret
- secretRef: