org.yml

# Org level secrets are used to store sensitive information that is
# shared across multiple apps in the same organization. This is
# useful for storing things like API keys, database credentials, and
# other sensitive information that is shared across multiple apps
# in the same organization.

# The qa-* dictionary is bootstrapped via this template; prod and
# staging dictionaries are created manually with real values.

# Initial bootstrap (once, manually, not in CI):
#   cpflow apply-template secrets -a qa-react-webpack-rails-tutorial --org shakacode-open-source-examples-staging
#
# Populate real values with `cpln apply -f <file>` or `cpln secret edit`.
# Do NOT re-apply this template after real values are set: it will
# overwrite them with the placeholders below.

kind: secret
name: {{APP_SECRETS}}
type: dictionary
data:
  # Both sides of the Rails/Node renderer handshake must match.
  # Generate with `openssl rand -hex 32`.
  RENDERER_PASSWORD: "replace-with-openssl-rand-hex-32"
  # JWT from https://pro.reactonrails.com/; same token across envs.
  REACT_ON_RAILS_PRO_LICENSE: "replace-with-pro-license-jwt"

---

# Policy is needed to allow identities to access secrets
kind: policy
name: {{APP_SECRETS_POLICY}}
targetKind: secret
targetLinks:
  - //secret/{{APP_SECRETS}}