adam/shoc-backend
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/shoc-backend.git synced 2026-10-07 16:19:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(eb): configure work-order webhook HMAC secret source

Browse source 
Add WorkOrderWebhook__SecretId as a codified environment property so the webhook receiver can load the producer keyset instead of failing closed.

Signed-off-by: Adam Moussa <adam@seahavenind.com>
This commit is contained in:
Adam Moussa 2026-07-28 13:51:04 -04:00 • committed by Adam Moussa
parent 658bae77d3
commit 53c2484775
No known key found for this signature in database
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
.ebextensions/02_webhook_config.config Normal file
View file

@ -0,0 +1,8 @@
# Sets the non-secret pointer the work-order webhook receiver reads to locate
# the producer HMAC keyset; the keyset itself is fetched at runtime through
# the instance role's cross-account grant. Do not set this property directly
# with update-environment: directly set values take precedence over
# .ebextensions and would silently turn this file into dead text.
option_settings:
aws:elasticbeanstalk:application:environment:
WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB