mirror of
https://github.com/stackblitz-labs/bolt.diy
synced 2025-06-26 18:26:38 +00:00
db9a2c9292
- Add ExternalSecret for auth secrets (SESSION_SECRET, GitHub OAuth) via AWS Secrets Manager - Separate user-configurable provider API keys into dedicated K8s Secret - Update deployment to use three-layer configuration model: * ConfigMap: non-sensitive public settings * ExternalSecret → Secret: infrastructure auth secrets from AWS * Secret: user-configurable provider API keys managed via UI - Add comprehensive documentation for AWS Secrets Manager setup - Include K8s deployment architecture guide with troubleshooting commands - Enable secure, auditable, and rotatable secrets management for production This follows enterprise security best practices with proper separation of concerns between infrastructure and user secrets.
36 lines
1.2 KiB
YAML
36 lines
1.2 KiB
YAML
# filepath: /Users/nirmalarya/Workspace/buildify/k8s/backup/secret.yaml
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: buildify-user-provider-secrets
|
|
namespace: buildify
|
|
type: Opaque
|
|
data:
|
|
# User-configurable API keys for various LLM providers
|
|
# These keys can be set through the application frontend by users
|
|
# and are NOT managed by AWS Secrets Manager
|
|
#
|
|
# Authentication secrets (SESSION_SECRET, GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET)
|
|
# are managed separately through AWS Secrets Manager via ExternalSecret
|
|
#
|
|
# These are placeholders. In production, they will be populated by user input
|
|
# through the application settings UI.
|
|
# Example: echo -n "your-api-key" | base64
|
|
|
|
# LLM Provider API Keys - User Configurable
|
|
GROQ_API_KEY: ""
|
|
OPENAI_API_KEY: ""
|
|
ANTHROPIC_API_KEY: ""
|
|
GOOGLE_GENERATIVE_AI_API_KEY: ""
|
|
TOGETHER_API_KEY: ""
|
|
AWS_BEDROCK_CONFIG: ""
|
|
BAYER_MGA_API_KEY: ""
|
|
MISTRAL_API_KEY: ""
|
|
COHERE_API_KEY: ""
|
|
PERPLEXITY_API_KEY: ""
|
|
XAI_API_KEY: ""
|
|
|
|
# Note: This secret only contains user-configurable provider API keys
|
|
# Infrastructure-level authentication secrets are stored in AWS Secrets Manager
|
|
# and injected via the buildify-auth-secrets ExternalSecret
|