backstage-secrets.yaml

apiVersion: v1
kind: Secret
metadata:
  name: backstage-secrets
type: Opaque
stringData:
  # Overall backend secret - TODO: not enabled yet though
  BACKEND_SECRET: BACKSTAGE_BACKEND_SECRET_TEXT

  # Explicit DB password or risk having an auto-generated thing rotate later. All three are used.
  POSTGRES_PASSWORD: BACKSTAGE_POSTGRES_PASSWORD
  user-password: BACKSTAGE_POSTGRES_PASSWORD
  admin-password: BACKSTAGE_POSTGRES_PASSWORD

  # PAT for general GitHub integration (ingesting repos, creating repos)
  GITHUB_TOKEN: BACKSTAGE_GITHUB_TOKEN

  # OAuth app for Backstage: https://github.com/organizations/CervTest/settings/applications/2241184
  # Online use: https://backstage.terasology.io and https://backstage.terasology.io/api/auth/github/handler/frame
  # Local use: http://localhost:3033 and http://localhost:7007/api/auth/github/handler/frame
  # Token for OAth login via GitHub - client id.
  GITHUB_AUTH_CLIENT_ID: BACKSTAGE_GITHUB_AUTH_CLIENT_ID
  # Token for OAth login via GitHub - client secret.
  GITHUB_AUTH_CLIENT_SECRET: BACKSTAGE_GITHUB_AUTH_CLIENT_SECRET

  # Spotify license key for premium plugins.
  SPOTIFY_LICENSE: PREMIUM_BACKSTAGE_PLUGINS_SPOTIFY_LICENSE

  # Utility variables useful in the config files but not necessarily secret - just convenient to add here

  # Local file path for example entities and such. Is "/app" within Docker but "../.." when running from source"
  CATALOG_FILE_PATH: /app