fix(official-bots): mount JWT public key from ncs-jwt-keys #414

2026-06-17T09:51:09+02:00

Janis commented

2026-06-17 09:51:09 +02:00

No description provided.

Janis added 2 commits 2026-06-17 09:51:10 +02:00

fix(official-bots): mount JWT public key from ncs-jwt-keys

Delete PR Branch On Close / delete-branch (pull_request) Successful in 6s

Details

cfb25eff8c

The official-bots rollout never mounted the ncs-jwt-keys secret nor set
JWT_PUBLIC_KEY_PATH, so the service fell back to the image-baked
public.pem, which does not match the deployed signing key. Every token
failed RS256 verification -> 401.

Mount ncs-jwt-keys at /secrets/jwt and point JWT_PUBLIC_KEY_PATH there,
mirroring account/core/tournament. Verify-only, no private key.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

chore(official-bots): debug logging for JWT verify on staging

Delete PR Branch On Close / delete-branch (pull_request) Successful in 6s

Details

f0dc9fd145

Enable DEBUG for io.smallrye.jwt and io.quarkus.security on the
official-bots rollout in staging only (container env, not the shared
ConfigMap) to diagnose the persistent 401. Remove after root cause.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Janis merged commit 4563782626 into main

2026-06-17 09:51:17 +02:00

Janis deleted branch fix/official-bots-jwt-mount

2026-06-17 09:51:19 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: NowChess/GitOps#414