Skip to content

Wire Azure DevOps webhook secret#675

Draft
ak684 wants to merge 1 commit into
mainfrom
codex/azure-devops-mentions
Draft

Wire Azure DevOps webhook secret#675
ak684 wants to merge 1 commit into
mainfrom
codex/azure-devops-mentions

Conversation

@ak684

@ak684 ak684 commented May 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add a generated Azure DevOps webhook shared secret to Replicated config
  • store the secret in the azure-devops-app Kubernetes Secret
  • expose AZURE_DEVOPS_WEBHOOK_SECRET to OpenHands when Azure DevOps auth is enabled
  • bump the touched chart versions

Validation

  • helm lint charts/openhands-secrets
  • helm dependency build charts/openhands
  • helm lint charts/openhands --set azureDevOps.enabled=true --set azureDevOps.tenantId=test-tenant --set azureDevOps.organization=test-org
  • helm template charts/openhands-secrets --set config.azure_devops_client_id=id --set config.azure_devops_client_secret=secret --set config.azure_devops_webhook_secret=hook | rg -n "azure-devops-app|client-id|client-secret|webhook-secret" -C 2
  • helm template charts/openhands --set azureDevOps.enabled=true --set azureDevOps.tenantId=test-tenant --set azureDevOps.organization=test-org | rg -n "AZURE_DEVOPS_WEBHOOK_SECRET|AZURE_DEVOPS_CLIENT_SECRET|AZURE_DEVOPS_ORGANIZATION|azure-devops-app" -C 3
  • uv run --with pyyaml python scripts/check_secret_checksum.py

@ak684 ak684 changed the title [codex] Wire Azure DevOps webhook secret Wire Azure DevOps webhook secret May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant