Add bearer token secret for Workload API (#9707)

Author: jdpgrailsdev

charts/airbyte-workload-api-server/templates/deployment.yaml

@@ -90,6 +90,11 @@ spec:
             secretKeyRef:
               name: {{ .Release.Name }}-airbyte-secrets
               key: DATABASE_USER
+        - name: WORKLOAD_API_BEARER_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.global.database.secretName | default (printf "%s-airbyte-secrets" .Release.Name ) }}
+              key: {{ .Values.global.database.secretValue | default "WORKLOAD_API_BEARER_TOKEN" }}
         {{- end }}
 
         # Values from secret

charts/airbyte-workload-launcher/templates/deployment.yaml

@@ -138,6 +138,11 @@ spec:
               fieldPath: metadata.namespace
         - name: JOB_KUBE_SERVICEACCOUNT
           value: {{ .Values.global.serviceAccountName }}
+        - name: WORKLOAD_API_BEARER_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.global.database.secretName | default (printf "%s-airbyte-secrets" .Release.Name ) }}
+              key: {{ .Values.global.database.secretValue | default "WORKLOAD_API_BEARER_TOKEN" }}
         {{- if $.Values.global.jobs.kube.annotations }}
         - name: JOB_KUBE_ANNOTATIONS
           valueFrom:
@@ -360,14 +365,19 @@ spec:
             configMapKeyRef:
               name: {{ .Release.Name }}-airbyte-env
               key: WORKER_STATE_STORAGE_TYPE
-        {{- if eq .Values.global.edition "pro" }}
+       {{- if eq .Values.global.edition "pro" }}
         - name: AIRBYTE_API_AUTH_HEADER_NAME
           value: "X-Airbyte-Auth"
         - name: AIRBYTE_API_AUTH_HEADER_VALUE
           value: "Internal worker"
         {{- end }}
 
         {{- end }}
+        - name: WORKLOAD_API_HOST
+          valueFrom:
+            configMapKeyRef:
+              name: {{ .Release.Name }}-airbyte-env
+              key: WORKLOAD_API_HOST
         # Values from secret
         {{- if .Values.secrets }}
         {{- range $k, $v := .Values.secrets }}

charts/airbyte/templates/env-configmap.yaml

@@ -25,6 +25,7 @@ data:
   GCS_LOG_BUCKET: {{ .Values.global.logs.gcs.bucket | quote }}
   GOOGLE_APPLICATION_CREDENTIALS: {{ include "airbyte.gcpLogCredentialsPath" . | quote }}
   INTERNAL_API_HOST: {{ .Release.Name }}-airbyte-server-svc:{{ .Values.server.service.port }}
+  WORKLOAD_API_HOST: {{ .Release.Name }}-airbyte-workload-api-svc:{{ index .Values "workload-api" "service" "port" }}
 {{- if eq .Values.global.edition "pro" }}
   KEYCLOAK_INTERNAL_HOST: {{ .Release.Name }}-airbyte-keycloak-svc:{{ .Values.keycloak.service.port }}
   KEYCLOAK_PORT: {{ .Values.keycloak.service.port | quote }}

charts/airbyte/templates/secret.yaml

@@ -22,4 +22,5 @@ stringData:
   KEYCLOAK_ADMIN_USER: {{ .Values.keycloak.auth.adminUsername | quote }}
   KEYCLOAK_ADMIN_PASSWORD: {{ .Values.keycloak.auth.adminPassword | quote }}
   {{- end }}
+  WORKLOAD_API_BEARER_TOKEN: {{ index ".Values.workload-api.bearerToken" | quote }}
 {{- end }}

charts/airbyte/values.yaml

@@ -1823,6 +1823,9 @@ keycloak-setup:
 
 workload-api:
   enabled: false
+
+  bearerToken: token
+
   ##  workload-api.replicaCount Number of airbyte-api-server replicas
   replicaCount: 1