update puma configuration with active record encryption environment vars

rubygems · Nov 1, 2024 · 5c3d797 · 5c3d797
1 parent 582074a
commit 5c3d797
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/config/deploy/production/puma.yaml.erb b/config/deploy/production/puma.yaml.erb
@@ -124,6 +124,21 @@ spec:
               secretKeyRef:
                 name: production
                 key: github_private_key
+          - name: ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY
+            valueFrom:
+              secretKeyRef:
+                name: production
+                key: active_record_encryption_primary_key
+          - name: ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY
+            valueFrom:
+              secretKeyRef:
+                name: production
+                key: active_record_encryption_deterministic_key
+          - name: ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT
+            valueFrom:
+              secretKeyRef:
+                name: production
+                key: active_record_encryption_key_derivation_salt
         securityContext:
           privileged: false
         lifecycle: