AuthPowerBI env vars

Author: szabozoltan69

deploy/helm/ifrcgo-helm/templates/config/secret.yaml

@@ -79,6 +79,9 @@ stringData:
   OIDC_RSA_PRIVATE_KEY_BASE64_ENCODED: "{{ .Values.env.OIDC_RSA_PRIVATE_KEY_BASE64_ENCODED }}"
   OIDC_RSA_PUBLIC_KEY_BASE64_ENCODED: "{{ .Values.env.OIDC_RSA_PUBLIC_KEY_BASE64_ENCODED }}"
   RELIEF_WEB_APP_NAME: "{{ .Values.env.RELIEF_WEB_APP_NAME}}"
+  AZURE_CLIENT_ID: "{{ .Values.env.AZURE_CLIENT_ID}}"
+  POWERBI_REPORT_ID: "{{ .Values.env.POWERBI_REPORT_ID}}"
+  POWERBI_WORKSPACE_ID: "{{ .Values.env.POWERBI_WORKSPACE_ID}}"
 
   # Additional secrets
   {{- range $name, $value := .Values.secretsAdditional }}

deploy/helm/ifrcgo-helm/values.yaml

@@ -66,6 +66,9 @@ env:
   OIDC_RSA_PRIVATE_KEY_BASE64_ENCODED:
   OIDC_RSA_PUBLIC_KEY_BASE64_ENCODED:
   RELIEF_WEB_APP_NAME: ''
+  AZURE_CLIENT_ID: ''
+  POWERBI_REPORT_ID: ''
+  POWERBI_WORKSPACE_ID: ''
 
 # NOTE: Used to pass additional configs to api/worker containers
 # NOTE: Not used by azure vault

docker-compose.yml

@@ -52,6 +52,10 @@ x-server: &base_server_setup
     IFRC_TRANSLATION_HEADER_API_KEY: ${IFRC_TRANSLATION_HEADER_API_KEY:-}
     # ReliefWeb appname
     RELIEF_WEB_APP_NAME: ${RELIEF_WEB_APP_NAME:-}
+    # Azure CLIENT_ID (PrincipalId) + PowerBI IDs
+    AZURE_CLIENT_ID: ${AZURE_CLIENT_ID:-}
+    POWERBI_REPORT_ID: ${POWERBI_REPORT_ID:-}
+    POWERBI_WORKSPACE_ID: ${POWERBI_WORKSPACE_ID:-}
 
   extra_hosts:
       - "host.docker.internal:host-gateway"

main/settings.py

@@ -147,6 +147,10 @@
     AZURE_OPENAI_DEPLOYMENT_NAME=(str, None),
     # ReliefWeb appname
     RELIEF_WEB_APP_NAME=(str, None),
+    # Azure CLIENT_ID (PrincipalId) + PowerBI IDs
+    AZURE_CLIENT_ID=(str, None),
+    POWERBI_REPORT_ID=(str, None),
+    POWERBI_WORKSPACE_ID=(str, None),
 )
 
 
@@ -880,6 +884,11 @@ def decode_base64(env_key, fallback_env_key):
 # ReliefWeb (for databank cronjob)
 RELIEF_WEB_APP_NAME = env("RELIEF_WEB_APP_NAME")
 
+# Azure CLIENT_ID (PrincipalId for Power BI usage)
+AZURE_CLIENT_ID = env("AZURE_CLIENT_ID")
+POWERBI_REPORT_ID = env("POWERBI_REPORT_ID")
+POWERBI_WORKSPACE_ID = env("POWERBI_WORKSPACE_ID")
+
 # Manual checks
 import main.checks  # noqa: F401 E402