From c5a4c6e97b477419750ceaf8f759361b34add2b1 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Mon, 23 Feb 2026 22:44:04 +0000
Subject: [PATCH] [ci skip] fix plotting-book: add SESSION_SECRET env var

Session secret stored in encrypted terraform.tfvars, referenced
via variable to avoid committing secrets in plain text.
---
 stacks/plotting-book/main.tf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/stacks/plotting-book/main.tf b/stacks/plotting-book/main.tf
index c24d16cf..c52ed31f 100644
--- a/stacks/plotting-book/main.tf
+++ b/stacks/plotting-book/main.tf
@@ -1,4 +1,5 @@
 variable "tls_secret_name" { type = string }
+variable "plotting_book_session_secret" { type = string }
 
 
 resource "kubernetes_namespace" "plotting-book" {
@@ -50,6 +51,10 @@ resource "kubernetes_deployment" "plotting-book" {
           # image = "viktorbarzin/book-plotter:7"
           name              = "plotting-book"
           image_pull_policy = "Always"
+          env {
+            name  = "SESSION_SECRET"
+            value = var.plotting_book_session_secret
+          }
           port {
             container_port = 3001
           }