Replaces DB_ENC_KEY with JWT_SECRET

defenseunicorns · Aug 7, 2024 · 27b96e3 · 27b96e3
1 parent b7cb54c
commit 27b96e3
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/packages/supabase/bitnami-values.yaml b/packages/supabase/bitnami-values.yaml
@@ -97,8 +97,11 @@ realtime:
           secretKeyRef:
             name: supabase-postgresql
             key: postgres-password
-      - name: DB_ENC_KEY
-        value: "testenckeychange" # This needs to be exactly 16 characters
+      - name: JWT_SECRET
+        valueFrom:
+          secretKeyRef:
+            name: '{{ include "supabase.jwt.secretName" . }}'
+            key: '{{ include "supabase.realtime.secretKey" . }}'
      command:
        - sh
        - -c
@@ -109,7 +112,7 @@ realtime:
            sleep 5;
          done;
          echo "supabase-realtime is ready. Running curl command...";
-         if curl --insecure -L -X POST -H "Content-Type: application/json" -H "Authorization: Bearer $SUPABASE_SERVICE_KEY" -H "apiKey: $SUPABASE_SERVICE_KEY" -d '{"tenant":{"name":"supabase-realtime","external_id":"supabase-realtime","jwt_secret":"'"$DB_ENC_KEY"'","extensions":[{"type":"postgres_cdc_rls","settings":{"db_name":"postgres","db_host":"supabase-postgresql","db_user":"supabase_admin","db_password":"'"$POSTGRESQL_PASSWORD"'","db_port":"5432","region":"us-east-1","publication":"supabase_realtime","ssl_enforced":"false","poll_interval_ms":"100","poll_max_record_bytes":"1048576"}}],"notify_private_alpha":"true"}}' https://supabase-kong.leapfrogai.svc.cluster.local/realtime/v1/api/tenants; then
+         if curl --insecure -L -X POST -H "Content-Type: application/json" -H "Authorization: Bearer $SUPABASE_SERVICE_KEY" -H "apiKey: $SUPABASE_SERVICE_KEY" -d '{"tenant":{"name":"supabase-realtime","external_id":"supabase-realtime","jwt_secret":"'"$JWT_SECRET"'","extensions":[{"type":"postgres_cdc_rls","settings":{"db_name":"postgres","db_host":"supabase-postgresql","db_user":"supabase_admin","db_password":"'"$POSTGRESQL_PASSWORD"'","db_port":"5432","region":"us-east-1","publication":"supabase_realtime","ssl_enforced":"false","poll_interval_ms":"100","poll_max_record_bytes":"1048576"}}],"notify_private_alpha":"true"}}' https://supabase-kong.leapfrogai.svc.cluster.local/realtime/v1/api/tenants; then
            echo "Curl command completed successfully. Entering sleep loop..."
            while true; do
              sleep 3600