From 42a848650b0b2e7dbdc31273107841c24c8ed002 Mon Sep 17 00:00:00 2001
From: Kyle Goyette <kyle@wandb.com>
Date: Wed, 30 Oct 2024 12:57:01 -0700
Subject: [PATCH] wip

---
 charts/operator-wandb/charts/app/templates/_deployment.tpl | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/charts/operator-wandb/charts/app/templates/_deployment.tpl b/charts/operator-wandb/charts/app/templates/_deployment.tpl
index bd91a74f..77f86f7b 100644
--- a/charts/operator-wandb/charts/app/templates/_deployment.tpl
+++ b/charts/operator-wandb/charts/app/templates/_deployment.tpl
@@ -254,6 +254,12 @@ spec:
                   },
                   "addr": "kafka://$(KAFKA_CLIENT_USER):$(KAFKA_CLIENT_PASSWORD)@$(KAFKA_BROKER_HOST):$(KAFKA_BROKER_PORT)/$(KAFKA_TOPIC_RUN_UPDATE_SHADOW_QUEUE)?producer_batch_bytes=1048576&num_partitions=$(KAFKA_RUN_UPDATE_SHADOW_QUEUE_NUM_PARTITIONS)&replication_factor=3"
                 }
+            {{- if index .Values.global "weave-trace" "enabled" }}
+            - name: GORILLA_INTERNAL_JWT_ISSUERS
+              value: '["https://kubernetes.default.svc.cluster.local"]'
+            - name: GORILLA_INTERNAL_JWT_SUBJECTS
+              value: '["system:serviceaccount:default:{{ .Values.global.weave-trace.serviceAccountName }}"]'
+            {{- end }}
             {{- include "app.extraEnv" (dict "global" $.Values.global "local" .Values) | nindent 12 }}
             {{- include "wandb.extraEnvFrom" (dict "root" $ "local" .) | nindent 12 }}
           {{- if .healthCheckEnabled }}