[werft] add public api token service support for preview environment

Author: mustard-mh

.werft/jobs/build/installer/post-process.sh

@@ -40,6 +40,13 @@ if [[ -f "/tmp/payment" ]] ; then
    printf \\n'---'\\n >> k8s.yaml
    cat "/tmp/payment" >> k8s.yaml
 fi
+# if public-api is configured: Append the YAML objects
+if [[ -f "/tmp/public-api" ]] ; then
+   echo "found /tmp/public-api, appending to k8s.yaml now"
+   # do not make any assumptions about new lines
+   printf \\n'---'\\n >> k8s.yaml
+   cat "/tmp/public-api" >> k8s.yaml
+fi
 
 # count YAML like lines in the k8s manifest file
 MATCHES="$(grep -c -- --- k8s.yaml)"

.werft/jobs/build/public-api/personal-access-token-signing-key.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+  personal-access-token-signing-key: Zm9vCg==
+kind: Secret
+metadata:
+  name: personal-access-token-signing-key
+  namespace: default
+type: Opaque

dev/preview/workflow/preview/deploy-gitpod.sh

@@ -383,6 +383,11 @@ yq w -i "${INSTALLER_CONFIG_PATH}" experimental.webapp.configcatKey "WBLaCPtkjkq
 yq w -i "${INSTALLER_CONFIG_PATH}" experimental.webapp.proxy.configcat.baseUrl "https://cdn-global.configcat.com"
 yq w -i "${INSTALLER_CONFIG_PATH}" experimental.webapp.proxy.configcat.pollInterval "1m"
 
+#
+# configurePublicAPI
+#
+yq w -i "${INSTALLER_CONFIG_PATH}" experimental.webapp.publicApi.personalAccessTokenSigningKeySecretName "personal-access-token-signing-key"
+
 #
 # configureDefaultTemplate
 #
@@ -489,6 +494,16 @@ for manifest in "$ROOT"/.werft/jobs/build/payment/*.yaml; do
   echo "---" >> /tmp/payment
 done
 
+#
+# configurePublicAPI
+#
+
+rm -f /tmp/public-api
+for manifest in "$ROOT"/.werft/jobs/build/public-api/*.yaml; do
+  cat "$manifest" >> /tmp/public-api
+  echo "---" >> /tmp/public-api
+done
+
 #
 # Run post-process script
 #
@@ -501,6 +516,7 @@ WITH_VM=true "$ROOT/.werft/jobs/build/installer/post-process.sh" "${PREVIEW_NAME
 rm -f /tmp/payment
 rm -f /tmp/defaultFeatureFlags
 rm -f /tmp/license
+rm -f /tmp/public-api
 
 # ===============
 # Install