Add secret key to worker, API (#333)

- **Add env var secret to worker, API**
- **Read key in worker**

ark_nova_stats/worker/app.py

@@ -91,6 +91,9 @@ def archive_logs_to_tigris(
     return new_archive
 
 
+API_SECRET_KEY = os.getenv("API_WORKER_SECRET")
+
+
 def main() -> int:
     tigris_client = boto3.client("s3", endpoint_url=os.getenv("AWS_ENDPOINT_URL_S3"))
     with app.app_context():

base/flask_app.py

@@ -41,6 +41,7 @@ def FlaskApp(name) -> tuple[Flask, CORS, SQLAlchemy, Migrate]:
     app.config.update(
         FRONTEND_URL=frontend_url,
         SECRET_KEY=os.getenv("FLASK_SECRET_KEY", "testing"),
+        WORKER_SECRET=os.getenv("API_WORKER_SECRET", "test-api-worker-secret"),
         SQLALCHEMY_DATABASE_URI=database_uri(),
         SQLALCHEMY_ENGINE_OPTIONS={
             "connect_args": {

skeleton/worker/app.py

@@ -1,9 +1,12 @@
+import os
 import time
 
 from skeleton.config import app, db
 
 max_delay = 10
 
+API_SECRET_KEY = os.getenv("API_WORKER_SECRET")
+
 
 def main() -> int:
     with app.app_context():

tools/build_rules/api/api_image.bzl

@@ -75,6 +75,7 @@ def api_image(
         "DB_PASSWORD": "development",
         "DATABASE_NAME": "api_development",
         "FLASK_SECRET_KEY": "testing",
+        "API_WORKER_SECRET": "test-api-worker-secret",
     }
     container_env.update(env)
 

tools/build_rules/worker/worker.bzl

@@ -43,6 +43,7 @@ def worker(
         "DB_PASSWORD": "development",
         "DATABASE_NAME": "api_development",
         "FLASK_SECRET_KEY": "testing",
+        "API_WORKER_SECRET": "test-api-worker-secret",
     }
     all_env.update(env)