chore: setup Lambeth S3 Power Automate integration tokens (#3949)

theopensystemslab · Nov 14, 2024 · b5f66ad · b5f66ad
1 parent 29a88f6
commit b5f66ad
Show file tree

Hide file tree

Showing 7 changed files with 15 additions and 0 deletions.
diff --git a/.env.example b/.env.example
@@ -31,6 +31,7 @@ AWS_SECRET_KEY=👻
 FILE_API_KEY=👻
 FILE_API_KEY_NEXUS=👻
 FILE_API_KEY_BARNET=👻
+FILE_API_KEY_LAMBETH=👻
 FILE_API_KEY_SOUTHWARK=👻
 
 # Editor

diff --git a/api.planx.uk/.env.test.example b/api.planx.uk/.env.test.example
@@ -20,6 +20,7 @@ AWS_SECRET_KEY=👻
 FILE_API_KEY=👻
 FILE_API_KEY_NEXUS=👻
 FILE_API_KEY_BARNET=👻
+FILE_API_KEY_LAMBETH=👻
 FILE_API_KEY_SOUTHWARK=👻
 
 # Editor

diff --git a/api.planx.uk/modules/auth/middleware.ts b/api.planx.uk/modules/auth/middleware.ts
@@ -91,6 +91,10 @@ export const useFilePermission: RequestHandler = (req, _res, next): void => {
       req.headers["api-key"] as string,
       process.env.FILE_API_KEY_BARNET!,
     ) ||
+    isEqual(
+      req.headers["api-key"] as string,
+      process.env.FILE_API_KEY_LAMBETH!,
+    ) ||
     isEqual(
       req.headers["api-key"] as string,
       process.env.FILE_API_KEY_SOUTHWARK!,

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -126,6 +126,7 @@ services:
       EDITOR_URL_EXT: ${EDITOR_URL_EXT}
       ENCRYPTION_KEY: ${ENCRYPTION_KEY}
       FILE_API_KEY_BARNET: ${FILE_API_KEY_BARNET}
+      FILE_API_KEY_LAMBETH: ${FILE_API_KEY_LAMBETH}
       FILE_API_KEY_SOUTHWARK: ${FILE_API_KEY_SOUTHWARK}
       FILE_API_KEY_NEXUS: ${FILE_API_KEY_NEXUS}
       FILE_API_KEY: ${FILE_API_KEY}

diff --git a/infrastructure/application/Pulumi.production.yaml b/infrastructure/application/Pulumi.production.yaml
@@ -10,6 +10,8 @@ config:
     secure: AAABAGyTfLujGho+V0tEhFXQRET5FjYK6txyaFTB3gY/VaKzq8yNlocJTAM5nt8mBhF6T+AeQD2GxW63
   application:file-api-key-barnet:
     secure: AAABANMl+fVFsRVGXvJV/aLManXO+TldXVDhp5QH6KGWJoG7O9Ket63zIW1iOiinINWJ2I5OizI=
+  application:file-api-key-lambeth:
+    secure: AAABAMNhdCTlFx3fZH/nO71ildypZB2JR5NixlQCENsS1VqwdiOX17q/Gi1UFrCQi2qaY2sZFG4=
   application:file-api-key-nexus:
     secure: AAABAB2cv4GAf8RqN1hHbRbO68p8o4kLJYWsip9BoPdobrNtQB787M3s+gJnKKl9DfyXRHOXHGc=
   application:file-api-key-southwark:

diff --git a/infrastructure/application/Pulumi.staging.yaml b/infrastructure/application/Pulumi.staging.yaml
@@ -11,6 +11,8 @@ config:
     secure: AAABAN0LjLOgxCkr5ZqQLn6FkZPcrPlvNG4fbNZ02W2qC1VVYVee/3aToZQuXuokVwnIPNbbe2w=
   application:file-api-key-barnet:
     secure: AAABAFpZq81zy3CKFXUgi9oEGIGp7LDVD3TNlYkZD4liX0bxOrmMJYdDpMmyGt4aGARF63nEUmo=
+  application:file-api-key-lambeth:
+    secure: AAABALQTeIf/uScxASJkhmoPRhewQT94Guad4iJ7GRk0DcND8wDUG0eNxDU4+XwUQZqCnL2DP+E=
   application:file-api-key-nexus:
     secure: AAABAJFgaBoTWNmZyXDkGRngwU8KpOt6CeBLxGBgBG0JFMsKK7rWT39TsjJ9pL1wZaBoT0YZhCg=
   application:file-api-key-southwark:

diff --git a/infrastructure/application/index.ts b/infrastructure/application/index.ts
@@ -348,6 +348,10 @@ export = async () => {
             name: "FILE_API_KEY_BARNET",
             value: config.requireSecret("file-api-key-barnet"),
           },
+          {
+            name: "FILE_API_KEY_LAMBETH",
+            value: config.requireSecret("file-api-key-lambeth"),
+          },
           {
             name: "FILE_API_KEY_SOUTHWARK",
             value: config.requireSecret("file-api-key-southwark"),