This is an automated email from the ASF dual-hosted git repository.

xuang7 pushed a commit to branch release/v1.2
in repository https://gitbox.apache.org/repos/asf/texera.git


The following commit(s) were added to refs/heads/release/v1.2 by this push:
     new 34d175063e fix(k8s, v1.2): add missing AUTH_JWT_SECRET to 
values-development.yaml  (#7000)
34d175063e is described below

commit 34d175063e733feff245ab9e4d4b8caaf95c0eda
Author: Yicong Huang <[email protected]>
AuthorDate: Wed Jul 29 14:07:24 2026 -0400

    fix(k8s, v1.2): add missing AUTH_JWT_SECRET to values-development.yaml  
(#7000)
    
    ### What changes were proposed in this PR?
    
    Backport of #6610 to `release/v1.2`, cherry-picked from
    f14cd3975e7446b77241990b7d573d182d61f88f. The cherry-pick applied
    cleanly.
    
    Follows the Direct Backport Push convention; opened as a PR (rather than
    a direct push) per a backport-coverage audit.
    
    ### Any related issues, documentation, discussions?
    
    Backport of #6610.
    
    ### How was this PR tested?
    
    Release-branch CI runs on this PR. Cherry-pick applied cleanly onto
    `release/v1.2`; no manual conflict resolution was needed.
    
    ### Was this PR authored or co-authored using generative AI tooling?
    
    Yes — backport prepared with Claude Code (mechanical cherry-pick; the
    change itself is #6610 by its original author).
    
    🤖 Generated with [Claude Code](https://claude.com/claude-code)
    
    Co-authored-by: ali risheh <[email protected]>
    Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
---
 bin/k8s/values-development.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/bin/k8s/values-development.yaml b/bin/k8s/values-development.yaml
index dc7078e468..aa64d6ecbc 100644
--- a/bin/k8s/values-development.yaml
+++ b/bin/k8s/values-development.yaml
@@ -352,6 +352,12 @@ texeraEnvVars:
     value: ""
   - name: USER_SYS_DOMAIN
     value: ""
+  - name: AUTH_JWT_SECRET
+    # Obvious non-secret placeholder for LOCAL DEVELOPMENT ONLY (64 chars = 
512-bit
+    # HMAC key, well above the 256-bit HS256 minimum). All services must share 
the
+    # same value, so this is a fixed shared string rather than a per-pod 
random one.
+    # Production environments MUST override this with a securely generated 
secret.
+    value: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
 
 yWebsocketServer:
   name: y-websocket-server

Reply via email to