Skip to content

[codex] Wire Azure DevOps webhook secret#675

Draft
ak684 wants to merge 1 commit into
mainfrom
codex/azure-devops-mentions
Draft

[codex] Wire Azure DevOps webhook secret#675
ak684 wants to merge 1 commit into
mainfrom
codex/azure-devops-mentions

Conversation

@ak684
Copy link
Copy Markdown
Contributor

@ak684 ak684 commented May 27, 2026

Summary

  • add a generated Azure DevOps webhook shared secret to Replicated config
  • store the secret in the azure-devops-app Kubernetes Secret
  • expose AZURE_DEVOPS_WEBHOOK_SECRET to OpenHands when Azure DevOps auth is enabled
  • bump the touched chart versions

Validation

  • helm lint charts/openhands-secrets
  • helm dependency build charts/openhands
  • helm lint charts/openhands --set azureDevOps.enabled=true --set azureDevOps.tenantId=test-tenant --set azureDevOps.organization=test-org
  • helm template charts/openhands-secrets --set config.azure_devops_client_id=id --set config.azure_devops_client_secret=secret --set config.azure_devops_webhook_secret=hook | rg -n "azure-devops-app|client-id|client-secret|webhook-secret" -C 2
  • helm template charts/openhands --set azureDevOps.enabled=true --set azureDevOps.tenantId=test-tenant --set azureDevOps.organization=test-org | rg -n "AZURE_DEVOPS_WEBHOOK_SECRET|AZURE_DEVOPS_CLIENT_SECRET|AZURE_DEVOPS_ORGANIZATION|azure-devops-app" -C 3
  • uv run --with pyyaml python scripts/check_secret_checksum.py

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant