feat: WIP: fetch secret from AWS Secrets Manager

Opetushallitus · Oct 18, 2024 · dfae667 · dfae667
1 parent 7c01419
commit dfae667
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 1 deletion.
diff --git a/server/pom.xml b/server/pom.xml
@@ -41,6 +41,13 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <dependency>
+                <groupId>io.awspring.cloud</groupId>
+                <artifactId>spring-cloud-aws-dependencies</artifactId>
+                <version>3.2.0</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
     <dependencies>
@@ -52,6 +59,14 @@
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
         </dependency>
+        <dependency>
+            <groupId>io.awspring.cloud</groupId>
+            <artifactId>spring-cloud-aws-starter-secrets-manager</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.awspring.cloud</groupId>
+            <artifactId>spring-cloud-aws-starter</artifactId>
+        </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-security</artifactId>
@@ -90,6 +105,14 @@
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>cloudwatchlogs</artifactId>
         </dependency>
+        <dependency>
+            <groupId>software.amazon.awssdk</groupId>
+            <artifactId>sso</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>software.amazon.awssdk</groupId>
+            <artifactId>ssooidc</artifactId>
+        </dependency>
 
         <dependency>
             <groupId>org.jetbrains.kotlin</groupId>

diff --git a/server/src/main/resources/application.properties b/server/src/main/resources/application.properties
@@ -7,7 +7,10 @@ springdoc.swagger-ui.url=/open-api.yaml
 springdoc.swagger-ui.csrf.enabled=true
 springdoc.api-docs.enabled=false
 
-kitu.kotoutumiskoulutus.koealusta.wstoken=${KIELITESTI_TOKEN}
+spring.config.import=aws-secretsmanager:kielitesti-token
+logging.level.io.awspring.cloud=debug
+
+kitu.kotoutumiskoulutus.koealusta.wstoken=${kielitesti-token}
 kitu.kotoutumiskoulutus.koealusta.scheduling.enabled=false
 
 kitu.oppijanumero.username=