chore(helm): Adding assist_key for additional security

Signed-off-by: rjshrjndrn <rjshrjndrn@gmail.com>

scripts/helmcharts/init.sh

@@ -105,6 +105,7 @@ sed_i_wrapper -i "s/postgresqlPassword: \"changeMePassword\"/postgresqlPassword:
 sed_i_wrapper -i "s/accessKey: \"changeMeMinioAccessKey\"/accessKey: \"$(randomPass)\"/g" vars.yaml
 sed_i_wrapper -i "s/secretKey: \"changeMeMinioPassword\"/secretKey: \"$(randomPass)\"/g" vars.yaml
 sed_i_wrapper -i "s/jwt_secret: \"SetARandomStringHere\"/jwt_secret: \"$(randomPass)\"/g" vars.yaml
+sed_i_wrapper -i "s/assistKey: \"SetARandomStringHere\"/assistKey: \"$(randomPass)\"/g" vars.yaml
 sed_i_wrapper -i "s/domainName: \"\"/domainName: \"${DOMAIN_NAME}\"/g" vars.yaml
 
 info "Setting proper permission for shared folder"

scripts/helmcharts/openreplay/charts/assist/templates/deployment.yaml

@@ -42,6 +42,8 @@ spec:
           {{- .Values.healthCheck | toYaml | nindent 10}}
           {{- end}}
           env:
+            - name: ASSIST_KEY
+              value: {{ .Values.global.assistKey }}
             - name: AWS_DEFAULT_REGION
               value: "{{ .Values.global.s3.region }}"
             - name: S3_HOST

scripts/helmcharts/openreplay/charts/peers/templates/deployment.yaml

@@ -42,7 +42,9 @@ spec:
           {{- .Values.healthCheck | toYaml | nindent 10}}
           {{- end}}
           env:
-            - name: S3_KEY
+            - name: ASSIST_KEY
+              value: {{ .Values.global.assistKey }}
+            - name: S3_KEYASSIST_KEY
               value: {{ .Values.global.s3.accessKey }}
             {{- range $key, $val := .Values.env }}
             - name: {{ $key }}

scripts/helmcharts/vars.yaml

@@ -99,6 +99,8 @@ global:
   redis: *redis
   quickwit: *quickwit
   openReplayContainerRegistry: "public.ecr.aws/p1t3u8a3"
+  # secret key to inject to assist and peers service
+  assistKey: "SetARandomStringHere"
   s3:
     region: "us-east-1"
     endpoint: "http://minio.db.svc.cluster.local:9000"