feat(flash): fygaro-webhook workload — deployment, service, ingress (chart 3.2.54) - #253
Merged
Merged
Conversation
…chart 3.2.53) Companion to lnflash/flash#472 (Fygaro card top-up payment webhook). Mirrors the bridge-webhook workload 1:1: same env surface, config secret mount, probes, and enabled-gating. - templates: fygaro-webhook-deployment/-service/fygaro-ingress, rendered only when galoy.fygaro.webhook.enabled (default off) - values: galoy.fygaro.webhook workload block (port 4010) and the `fygaro` app-config block under galoy.config (default-off; HMAC secrets injected per environment via deployments overlays) - helper: galoy.fygaro.webhook.fullname Render-verified: enabled=true produces all three objects with the fygaro-webhook-server entrypoint; default renders no workload while the fygaro config still reaches custom.yaml. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01NcEjF6SS3Ci5D4CzZqdPjb
…h on unknown keys The app config schema is additionalProperties:false at the root, so the currently-pinned image rejects the fygaro key in custom.yaml and every config-loading pod crash-loops (api/trigger/websocket/exporter/ ibex-webhook) — which is exactly what the dev-setup smoketest caught. The fygaro config block moves to deployments overlays, added only after the flash image includes the fygaro schema (which defaults the feature off when the key is absent). The chart keeps only the workload block, which renders nothing while disabled. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01NcEjF6SS3Ci5D4CzZqdPjb
islandbitcoin
changed the title
islandbitcoin
force-pushed
the
feat/fygaro-webhook-workload
branch
from
August 8, 2026 17:07
f281513 to
87aaf52
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Companion to lnflash/flash#472 (Fygaro card top-up payment webhook) and lnflash/flash-mobile#685.
Mirrors the bridge-webhook workload 1:1 — same env surface, config-secret mount, probes, and enabled-gating:
fygaro-webhook-deployment.yaml,fygaro-webhook-service.yaml,fygaro-ingress.yaml— all gated ongaloy.fygaro.webhook.enabled(default off)galoy.fygaro.webhookworkload block (port 4010, replicas/probes/ingress mirroring bridge). Thefygaroapp-config block deliberately does NOT ship in defaultgaloy.config: the app schema isadditionalProperties: falseat the root, so images predating flash#472 crash-loop on the unknown key (the dev-setup smoketest caught exactly this). Addgaloy.config.fygaro+ HMAC secrets via deployments overlays only after the flash image includes the fygaro schema; newer images default the feature off when the key is absent.galoy.fygaro.webhook.fullnameRender-verified (deps stripped locally):
enabled=trueproduces the Deployment (entrypointlib/servers/fygaro-webhook-server.js), Service, and Ingress; the default render produces no fygaro workload while thefygaroconfig block still reachescustom.yamlfor the app schema.helm lintclean (pre-existing unvendored-dependency warning only).Rollout note: merge order is flash#472 (image) → this chart → deployments overlay adding the hook host + secrets → configure the Hook URL in Fygaro's dashboard.
🤖 Generated with Claude Code
https://claude.ai/code/session_01NcEjF6SS3Ci5D4CzZqdPjb