feat(vault): include vault as a umbrella chart for hyperswitch (#58)

Co-authored-by: Jagan Elavarasan <jaganelavarasan@gmail.com>

charts/incubator/hyperswitch-card-vault/templates/_helpers.tpl

@@ -64,7 +64,7 @@ Create the name of the service account to use
 
 
 {{/*  validation */}}
-{{- define "validate.postgresql.config" -}}
+{{- define "validate.locker-psql.config" -}}
     {{- if not (or  .Values.postgresql.enabled .Values.external.postgresql.enabled) }}
         {{-  fail
         "Both postgresql.enabled and external.postgresql.enabled cannot be 'false' at the same time. Please, onfigure at least one Redis."
@@ -78,19 +78,19 @@ Create the name of the service account to use
 
 
 {{/* Select PostgreSQL host Internal or External */}}
-{{- define "postgresql.host" -}}
-{{- $test_db := include "validate.postgresql.config" . }}
+{{- define "locker-psql.host" -}}
+{{- $test_db := include "validate.locker-psql.config" . }}
   {{- if .Values.postgresql.enabled }}
-    {{- printf "%s-postgresql" .Release.Name | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+    {{- printf "%s-locker-db" .Release.Name | replace "+" "_" | trunc 63 | trimSuffix "-" }}
   {{- else -}}
     {{- printf "%s" .Values.external.postgresql.config.host -}}
   {{- end -}}
 {{- end -}}
 
 
 {{/* Select PostgreSQL port Internal or External */}}
-{{- define "postgresql.port" -}}
-{{- $test_db := include "validate.postgresql.config" . }}
+{{- define "locker-psql.port" -}}
+{{- $test_db := include "validate.locker-psql.config" . }}
   {{- if .Values.postgresql.enabled }}
     {{- printf "\"5432\"" }}
   {{- else -}}
@@ -100,8 +100,8 @@ Create the name of the service account to use
 
 
 {{/* Select PostgreSQL host Internal or External */}}
-{{- define "postgresql.username" -}}
-{{- $test_db := include "validate.postgresql.config" . }}
+{{- define "locker-psql.username" -}}
+{{- $test_db := include "validate.locker-psql.config" . }}
   {{- if .Values.postgresql.enabled }}
     {{- printf "%s" .Values.postgresql.global.postgresql.auth.username -}}
   {{- else -}}
@@ -111,8 +111,8 @@ Create the name of the service account to use
 
 
 {{/* Select PostgreSQL host Internal or External */}}
-{{- define "postgresql.name" -}}
-{{- $test_db := include "validate.postgresql.config" . }}
+{{- define "locker-psql.name" -}}
+{{- $test_db := include "validate.locker-psql.config" . }}
   {{- if .Values.postgresql.enabled }}
     {{- printf "%s" .Values.postgresql.global.postgresql.auth.database -}}
   {{- else -}}
@@ -122,8 +122,8 @@ Create the name of the service account to use
 
 
 {{/* Select PostgreSQL host Internal or External */}}
-{{- define "postgresql.password" -}}
-{{- $test_db := include "validate.postgresql.config" . }}
+{{- define "locker-psql.password" -}}
+{{- $test_db := include "validate.locker-psql.config" . }}
   {{- if .Values.postgresql.enabled }}
     {{- printf "%s" .Values.postgresql.global.postgresql.auth.password -}}
   {{- else -}}

charts/incubator/hyperswitch-card-vault/templates/_init.tpl

@@ -1,5 +1,5 @@
 {{/*Ensure postgres database is up and running */}}
-{{- define "postgresql.initContainer.check.ready" -}}
+{{- define "locker-psql.initContainer.check.read" -}}
 - name: check-postgres
   image: {{ .Values.initDB.checkPGisUp.image }}
   command: [ "/bin/sh", "-c" ]
@@ -9,7 +9,7 @@
     MAX_ATTEMPTS=10
     SLEEP_SECONDS=10;
     attempt=0;
-    while ! pg_isready -U {{ include "postgresql.username" . }} -d {{ include "postgresql.name" . }} -h {{ include "postgresql.host" . }} -p {{ include "postgresql.port" . }}; do
+    while ! pg_isready -U {{ include "locker-psql.username" . }} -d {{ include "locker-psql.name" . }} -h {{ include "locker-psql.host" . }} -p {{ include "locker-psql.port" . }}; do
       if [ $attempt -ge $MAX_ATTEMPTS ]; then
         echo "PostgreSQL did not become ready in time";
         exit 1;

charts/incubator/hyperswitch-card-vault/templates/deployment.yaml

@@ -44,18 +44,18 @@ spec:
             - name: LOCKER__LOG__CONSOLE__LOG_FORMAT
               value: default
             - name: LOCKER__DATABASE__USERNAME
-              value: {{ include "postgresql.username" . }}
+              value: {{ include "locker-psql.username" . }}
             - name: LOCKER__DATABASE__PASSWORD
               valueFrom:
                 secretKeyRef:
                   name: locker-secrets-{{ .Release.Name }}
                   key: LOCKER__DATABASE__PASSWORD
             - name: LOCKER__DATABASE__HOST
-              value: {{ include "postgresql.host" . }}
+              value: {{ include "locker-psql.host" . }}
             - name: LOCKER__DATABASE__PORT
-              value: {{ include "postgresql.port" . }}
+              value: {{ include "locker-psql.port" . }}
             - name: LOCKER__DATABASE__DBNAME
-              value: {{ include "postgresql.name" . }}
+              value: {{ include "locker-psql.name" . }}
             - name: LOCKER__LIMIT__REQUEST_COUNT
               value: "100"
             - name: LOCKER__LIMIT__DURATION
@@ -120,8 +120,8 @@ spec:
             timeoutSeconds: 1
           resources:
             requests:
-              cpu: 400m
-              memory: 500Mi
+              cpu: 100m
+              memory: 200Mi
 
           securityContext:
             privileged: false

charts/incubator/hyperswitch-card-vault/templates/migration-db.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       restartPolicy: OnFailure
       initContainers:
-        {{- include "postgresql.initContainer.check.ready" . | nindent 8 }}
+        {{- include "locker-psql.initContainer.check.ready" . | nindent 8 }}
       containers:
         - name: run-locker-db-migration
           image: {{ .Values.initDB.migration.image }}
@@ -30,11 +30,11 @@ spec:
               echo "Completed hyperswitch database migration"
           env:
             - name: POSTGRES_HOST
-              value: {{ include "postgresql.host" . }}
+              value: {{ include "locker-psql.host" . }}
             - name: DBNAME
-              value: {{ include "postgresql.name" . }}
+              value: {{ include "locker-psql.name" . }}
             - name: POSTGRES_USER
-              value: {{ include "postgresql.username" . }}
+              value: {{ include "locker-psql.username" . }}
             - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:

charts/incubator/hyperswitch-card-vault/templates/secrets.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 data:
-  LOCKER__DATABASE__PASSWORD: {{ include "postgresql.password" . | b64enc }}
+  LOCKER__DATABASE__PASSWORD: {{ include "locker-psql.password" . | b64enc }}
   LOCKER__SECRETS__MASTER_KEY: {{ .Values.server.secrets.master_key | b64enc }}
   LOCKER__SECRETS__LOCKER_PRIVATE_KEY: {{ .Values.server.secrets.locker_private_key | b64enc }}
   LOCKER__SECRETS__TENANT_PUBLIC_KEY: {{ .Values.server.secrets.tenant_public_key | b64enc }}

charts/incubator/hyperswitch-card-vault/values.yaml

@@ -52,42 +52,42 @@ server:
     # The private key for the locker from locker-private-key.pem
     locker_private_key: |
       -----BEGIN RSA PRIVATE KEY-----
-      MIIEpQIBAAKCAQEA4EXw24jOqrjZzhZG7ef9MYNWqHfTHKfliRRxZOWkjYIUuGjH
-      xxIE5mjo6VK8KQljbpK1EXYsWYjaTBiLzYzagTu7uacw2dTvPIIbxJcxDfmDFoct
-      XppRrwjHizEayLoixwe93zQ6W+QXLVMI6muJUgpiJ8+vvfYUbN9AWDgiAmVQV08P
-      8CRvFGXI4Yyn7Tcg+7tLbAYr+z8ZvmUBPcAKboqJzZBgPpTZe0k4sIwPVIDnPVVH
-      9Jk/tmU/MhjEL1XIMYBX7/S+uOQrr5NRhSvHHBi6iF/OzzYnOz4Jhcb2m9zyT1qv
-      ObY59avDovK4fI3KdQsd7tvfu9h2438JiHrjSwIDAQABAoIBAQCUDLeuRMahHrvx
-      dvVF0fJrwBbxyYAcl51H+63LfGk/XRLOlaTj/jor3C987zf1IxR3hvNu3oLybAwn
-      VcDcZVJNI6COMxdlhVKUsBMimOgyIHdv5LaHj/nCQVpwwW67+VxB5RNriC/KP20p
-      Z3ooPer9tIsNWuXZ0duz70CrvAp/ZyPboS5iICRMTzkimWeEy6wPunpk5YOQhyPn
-      GL5Gd2DNRqCGnk1GWUwBCY9/iWs0TW5jx8K6PUlwswQHU+Me8zeXo1iT4nMr2yId
-      BTlwOia9ZHjDqEulrV/2YERsLKbdLTy7jhxK/uibZuxol5/hr8ELQkoHzu6yFOU/
-      kYYIPAtBAoGBAPKtuZvR7nO1AWx+qaAtHicMQcazGatxQfz1rfJ/ny8ayEN/GVye
-      rvcNbJMwAG38VIUh0so8VgITgEX/mbGndxL5jpstTd1SXM1walBTu59kFVsnmQZn
-      hUyO8oxMZNDpgS1Dc2eX/JGBEYmJbz/5DyDa1pAglp8Ej8KJnBc9d82rAoGBAOyV
-      kj8PzJSduMS7oZoek/HKdvelWBNpeBC9rnCXAVbyjYv5rU5VISr0mfAJK54jjxXn
-      PEYApJgSB8fTxFHh3TapBjExkkm293o5CKVrSbv9v0yPbZh1FOBa6DK3hBs8Zwlq
-      iikD2Dqof/qcJML5njWO5TaN/DfySaxIeSdKLWDhAoGBALCA7kiIrbf2ZGy2y0S2
-      zAF2hriwNvFc1LPZNIT1kZ+/CP0eiiG1QGhrmRaMiSN1rTuPWDLDI4MrD9bZir2N
-      oatpWvE+SC2648iABLMb05CgSHAeIsxnqqn+JicowQK5cryrHFqyTn69szWnggSz
-      bu9kez4klahetvi1AZRdnq81AoGADbXlUc5CluJFEPGmvd3DySFon5Vvc0CLerzj
-      XRcDNty7oz8G8iEw2OJwAV8mrfV1l1ldPtlOsJlq5gO5vt0OCtrkxvkOd0MpOGYR
-      wDRlg4WDDpbJTSqL2SyrhDTqbQGlHwCTnSjh4RRexlFCOCJrLsNnOTAlS8C40Ekq
-      7EH6O0ECgYEAksw52Si+wcCzsfjT1WCywlJ4SFaQIpYt5/zuOiY+XUtcZfVEuRWa
-      FkN/n61HQVy+Quv918VHldElTDqv6O0x/OU2xvjiXCoQh4zTcAXxw4cCTGxxNM4J
-      LubCEvK1De5p5JZYVarob+X2uOIdVRpcD9PYIslKDz0OwfhiFwEkqdQ=
+      MIIEpAIBAAKCAQEAsgwEJaGbRA1DNMzubq4M7d+i6TSrFPiqrqnNkO0Dct58jGbJ
+      36xIOxfsf7qa03kP+idEZnh0w9kWcVmx4aL+nqeDzQtZ8RQdBMg2lJl4srDjxdKT
+      ABdeMq3c6W+tyXG1E/vz2qik0ROp65JkxlTST1e4wWC9IwpmaNAFtjW9oFc48K6O
+      u7SZOl/hAm5QJPUxsY1lFbbVwQD6pbRRhLaszrGRFqczQVhtCz6ZsJWSpSwfpZAh
+      NKlBHatkuojY4yLw/Qey3xaCR83fn2hCaoXO++9ffcbPIwxb7XTkbc25kJT+bOuN
+      5ttnmAPRDV1l5hR432fiSqNIo015gTy83Nv2LwIDAQABAoIBAGCpXWcAwcbEXIRB
+      7gBwxdwu2cc6LNeJ2UBSN6RCyOiIGZ4v/9FLOzu51U/TA1NkGmR5BQ2Mv/fD2AdZ
+      5tTVJN8FmuyrCP11Kfv6pocuevSoTECN/fjCtwVUlua1FuiSrvhWhSFlBXXs8wdN
+      xyBV1If22/tAhe6MKuUkarVtn7F4QTa+vWbdbEI5cC4Y4k3h6W8h065ZHW8CLV2V
+      Fk9WtqDf+e7K4E04R0k6CvO5fK3PvxRBB5/foObG28ut/8el+2SmP809aYQnYy8j
+      8uVbOIYEb2GTPWBxNk/gvIX5o3Kk6DT2RpUuu6RMwaMk2GWWoIjJBz17bACelMiG
+      S36xaKECgYEA2itL446mYkQYhJM1AwEojxs8O3/MysDJfiOZY0vFoXTk+Xv9Ae15
+      n7VNPdwrQy8YMsB3kpXjU3W6gKXlpW7bnFp4h2/V4VuLaEhSknF+hYNPk1V2y1iq
+      XcUlgqDi3N43o0Z0sS7D1IA1hzeI63YQ9FPP/kYF61SELtT9U8OH110CgYEA0Oup
+      11A0YjFEF3OemtOWXExi0DFocn5c+/o+tIPZX3MUCISOSEslT1qYe++NRoQBIB+p
+      slR30DJRZrl6R4fsP4Upr/iclyBYZsX7KonOdhmzPiuTG+khVSb22ejY81hAUzjl
+      AeDV3QlMN3lmHAVcfavJgfIeYCC/hm1P32hEJvsCgYAMbUzsUFLP5BsVaiEp46YA
+      yMdciEINBoAzrClvi4BdWwAz6ckWlAVKgJQ+wszADe2t7mKhOeJx/ZG7BDgZfUAL
+      HuggptEi/gjpzrzNVKOlTT56IPMcUBecMb+aOjnR5OJ8bWX2Nbi34PmrkxE8gEQk
+      9qUxUaHCrtS8qisn20pgjQKBgQC4fTMZKQFpKJo5n2cSz//6d5XWxZq3aHESLpTK
+      8Ze2Gzg4oV3H51wGLDl1UEBQYedgh7Vh/gdjudt6PBYILrZoDV6Xv5IAPpbyAqje
+      kpzYW6+WGgKpZgCCYosgOOfEVE1RcG+CbhpNO5Wrcy/BVNatP1MNxlIejyyyN7uN
+      zFRKmwKBgQCOdAQ57htPHkpcXzYreRlwjKiDqaN8rvxqMEu1WyW9Y18T+hcPw8r+
+      deYMmUHKvQBUaPG0Q2uu2n+mYKFQK6XucRFeHcPSzElk15nki/DAYaxOLzBEi8hI
+      0vCnCqm+d6KBKsS5i0pMgvPdC07VrWKnyzdX4goP0CaAhI0A1OGlsA==
       -----END RSA PRIVATE KEY-----
     # The public key for the locker from locker-public-key.pem
     tenant_public_key: |
       -----BEGIN PUBLIC KEY-----
-      MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2GTqIlJxx1bA9HFFPJ
-      2HFIJGh9iWJTqn9OWoayOUpM01fT86ZMR6ozCPKiKGk1nkKcSS+wWemrMBGZD76H
-      rcnx93rHZzkx/F1/Rxtuy3Dp1GMmVZ+jO8ZMIRl5LBBtAXG4BTC/+ckrGcEocrT1
-      YvqshrWinXbBfkCyzE+tBo++6oFwsdMBZdLfF4C3nnSJxQaUgddQ9dItG6ywDM55
-      jvKpQL6TnhPxc2Th0T1UEVGWbw8VOyhLfYXa8+nB7z3zebvIIrZgu5DIu4k8A8yu
-      kyW98E7XBg8vOG9qIEXfhkWHQZfApZdQVIpwczXateiKKbtSVFMQHeafo6dIq90B
-      1wIDAQAB
+      MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnWltGc6kjcDAhtUoad
+      0xlLJZCwLc6P80j8k3dgo92nqocUKD7tsY61dgm3gKFr8sZPLbTaDV1SJ+jAeZNP
+      476aonJVPottQvGduB5DqDCMcHDQkrYkBtOb+/ID5qOi8ATVVMfJASjVbw/D0R/A
+      EuiG0vmddl+8676xWIT8TZTmzowIvvUIYEuaUS8DRpmTAWPXYdv72fDZtuyhpU0Y
+      GAdHGyQrHXwGdGe31N65vmqMyWoiIXGMuJKqP/EZEqmVkkfWXuDioa57YrPUU07o
+      D7KsS00L4QGBB3MeJxEpQjhmNybjQeDejl4YPj3dboFyf6468skKS91+wV0Exghy
+      TwIDAQAB
       -----END PUBLIC KEY-----
 
   # Extra values to be added to hyperswitch-card-vault.
@@ -98,8 +98,7 @@ server:
 # Values for database (postgresql).
 postgresql:
   enabled: true
-  primary:
-    name: locker-db
+  nameOverride: locker-db
   global:
     postgresql:
       auth:

charts/incubator/hyperswitch-helm/Chart.lock

@@ -5,8 +5,11 @@ dependencies:
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
   version: 13.2.27
+- name: hyperswitch-card-vault
+  repository: file://../hyperswitch-card-vault
+  version: 0.1.0
 - name: hyperswitchsdk
   repository: file://../hyperswitch-sdk
   version: 0.1.0
-digest: sha256:122a406961f8ec0dc4d9a159bacf7fb2c05c8c9670f08b88ed8345987517efb9
-generated: "2024-02-02T02:38:47.669694+05:30"
+digest: sha256:362d4004c9eb47e250d440c50355147d32be77e4725016a0acdd7a99d14c1a3c
+generated: "2024-02-02T02:57:03.293813+05:30"

charts/incubator/hyperswitch-helm/Chart.yaml

@@ -13,7 +13,11 @@ dependencies:
     repository: https://charts.bitnami.com/bitnami
     version: 13.2.27
     condition: postgresql.enabled
+  - name: hyperswitch-card-vault
+    version: 0.1.0
+    repository: "file://../hyperswitch-card-vault"
+    condition: hyperswitch-card-vault.enabled
   - name: hyperswitchsdk
     version: 0.1.0
     repository: "file://../hyperswitch-sdk"
-    condition: hyperswitchsdk.enabled
+    condition: hyperswitchsdk.enabled

charts/incubator/hyperswitch-helm/templates/misc/secrets.yaml

@@ -18,7 +18,6 @@ data:
   ROUTER__KMS__KEY_ID: {{ .Values.application.server.secrets.kms_key_id | b64enc }}
   ROUTER__KMS__REGION: {{ .Values.application.server.secrets.kms_key_region | b64enc }}
   ROUTER__JWEKEY__RUST_LOCKER_ENCRYPTION_KEY: {{ .Values.application.server.secrets.kms_jwekey_rust_locker_encryption_key | b64enc }}
-  ROUTER__LOCKER__BASILISK_HOST: ""
   ROUTER__SECRETS__KMS_ENCRYPTED_ADMIN_API_KEY: {{ .Values.application.server.secrets.kms_admin_api_key | b64enc }}
   ROUTER__SECRETS__KMS_ENCRYPTED_JWT_SECRET: {{ .Values.application.server.secrets.kms_jwt_secret | b64enc}}
   ROUTER__SECRETS__MASTER_ENC_KEY: {{ .Values.application.server.master_enc_key | b64enc }}

charts/incubator/hyperswitch-helm/templates/router/deployment.yaml

@@ -70,6 +70,8 @@ spec:
                 name: router-cm-{{ .Release.Name }}
             - secretRef:
                 name: router-secret-{{ .Release.Name }}
+            - secretRef:
+                name: hyperswitch-secrets
           livenessProbe:
             failureThreshold: 3
             httpGet:

charts/incubator/hyperswitch-helm/values.yaml

@@ -52,7 +52,6 @@ application:
     # secrets to be used by the hyperswitch application
     secrets:
 
-
   server:
     # Number of replicas to be used for the application
     replicas: 3
@@ -105,20 +104,56 @@ application:
       kms_jwekey_locker_encryption_key2: dummy_val
       kms_jwekey_locker_decryption_key1: dummy_val
       kms_jwekey_locker_decryption_key2: dummy_val
-      kms_jwekey_vault_encryption_key: dummy_val
-      kms_jwekey_vault_private_key: dummy_val
+      # these are only test keys, please change it when deploying to production or other environments
+      kms_jwekey_vault_encryption_key: |
+        -----BEGIN PUBLIC KEY-----
+        MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgwEJaGbRA1DNMzubq4M
+        7d+i6TSrFPiqrqnNkO0Dct58jGbJ36xIOxfsf7qa03kP+idEZnh0w9kWcVmx4aL+
+        nqeDzQtZ8RQdBMg2lJl4srDjxdKTABdeMq3c6W+tyXG1E/vz2qik0ROp65JkxlTS
+        T1e4wWC9IwpmaNAFtjW9oFc48K6Ou7SZOl/hAm5QJPUxsY1lFbbVwQD6pbRRhLas
+        zrGRFqczQVhtCz6ZsJWSpSwfpZAhNKlBHatkuojY4yLw/Qey3xaCR83fn2hCaoXO
+        ++9ffcbPIwxb7XTkbc25kJT+bOuN5ttnmAPRDV1l5hR432fiSqNIo015gTy83Nv2
+        LwIDAQAB
+        -----END PUBLIC KEY-----
+      # these are only test keys, please change it when deploying to production or other environments
+      kms_jwekey_vault_private_key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        MIIEpAIBAAKCAQEAsSnWltGc6kjcDAhtUoad0xlLJZCwLc6P80j8k3dgo92nqocU
+        KD7tsY61dgm3gKFr8sZPLbTaDV1SJ+jAeZNP476aonJVPottQvGduB5DqDCMcHDQ
+        krYkBtOb+/ID5qOi8ATVVMfJASjVbw/D0R/AEuiG0vmddl+8676xWIT8TZTmzowI
+        vvUIYEuaUS8DRpmTAWPXYdv72fDZtuyhpU0YGAdHGyQrHXwGdGe31N65vmqMyWoi
+        IXGMuJKqP/EZEqmVkkfWXuDioa57YrPUU07oD7KsS00L4QGBB3MeJxEpQjhmNybj
+        QeDejl4YPj3dboFyf6468skKS91+wV0ExghyTwIDAQABAoIBAGG7G8a9QVu477Kv
+        n2csHbpLNLo3VAkg7yYdOEA9VZFwAENBGuyMsmEFwbKo75LE+aDGpv0mzDcdKOod
+        KrimfCa9id5dRgsnrRGF6iSchWQty/tnMJgOZFdjuqPEwUQlNwhDElAfmhHKrdsD
+        jlk5s6J6pY2S57taWwSNgJW9XtWIiCvI+VXxSqK7KDjGwDko8Kv86/Gck87IBxa5
+        5OqDlvOsPSqTQpqT3BqFu7PSh/dPGZ90u2Yyvsns4EnBpVkxmxPKDddv/b2PkwnC
+        /gVoctmrZ+YRkXN/07L34TSJzdWVZis0+w7DydhIz/n1ueYIX7D1Ef7uHWi709AJ
+        HLnBvDkCgYEA5N3RG6993ef/zH7Ir+k4iwlUTkXI8YAEY2Vavpk21cG60kTwzhUN
+        KbjsLJRuX5N3soWxhlrXX+V7ihTSCXbO0mFpOQwW66XBKZyV3i5NllpS3+ldiyfO
+        FxjYgJVZsnXpJX3c4R4HwZ6qja4oKZabsqypg7BaIgGJMArkZUHJDYsCgYEAxirQ
+        kmN6MUZMa52gBZLGnAiXNVZj0yUmaDU5hLJlLHu00Ut80hOC9d4Ekv6R0Y/aSC3h
+        eVzPkrkFOSySytifyGK0cU+3ielJncIGJHraIYkWdM0aex1jX0Ms77hfMlCYcagJ
+        5uwiwFSNNboOWnm9P3M/1enJAsuw1MzFFBtBDs0CgYEA4N1MIh6H1Wqnur1q4uOL
+        iZft/EW2jAlSxnID+bbB2L3Sl9vimSi32SF28soXs9JJTd7rsG06pV7sxZt1TpUr
+        2iqZXtKRBpDCO+c8nKLz2mD+gj9giGPgqnLf7V5QVfZhz1NdnNWLm2IQgsn1bf8r
+        FR9uIhQ4Sqclqk1ZYF+FcccCgYAYeitfGZh7Q6Km3EZqydFsboc22F/mMb2Hu6NK
+        J7rlfrY77+YQEMbpVa4c9gLO7sTYi4pBMlyVU/M4N7A+C/nYh5CgOmeCSmWEbfXS
+        RbZx0/wJG1h9AolGuAZx6cUgcuIRj98BPgOg3BDBJSUmucjNcI/e/UyN4tkJv+1L
+        6X3ktQKBgQDMa06pjBgpRq8BJhcxs1mluPgHGad1lBzU5IcVX1oRFyux8PtsfSoA
+        kIYrGckStjrvfOD2VnTIQWAuujOTtxjP0yR+cHlmwWXZrrj5+x8kNAOqgN7gU1nt
+        KYpNT2+Sc7wxwAWIucVSN3eRNzRGTysxUWYKFUlpGRKP6NwJDEz9ew==
+        -----END RSA PRIVATE KEY-----
       kms_jwekey_tunnel_private_key: dummy_val
       kms_jwekey_rust_locker_encryption_key: dummy_val
       kms_connector_onboarding_paypal_client_id: dummy_val
       kms_connector_onboarding_paypal_client_secret: dummy_val
       kms_connector_onboarding_paypal_partner_id: dummy_val
     master_enc_key: 471f22516724347bcca9c20c5fa88d9821c4604e63a6aceffd24605809c9237c
     locker:
-      host: locker-host
-      locker_public_key: |
-        public
-      hyperswitch_private_key: |
-        private
+      host: http://hyperswitch-vault
+      locker_public_key: 
+      hyperswitch_private_key: 
     basilisk:
       host: basilisk-host
     server_base_url: https://sandbox.hyperswitch.io
@@ -160,7 +195,6 @@ application:
     env:
       binary: consumer
 
-
   producer:
     # Number of replicas to be used for the application
     replicas: 1
@@ -380,6 +414,8 @@ autoscaling:
   maxReplicas: 10
   targetCPUUtilizationPercentage: 80
 
+hyperswitch-card-vault:
+  enabled: true
 hyperswitchsdk:
   enabled: true
   podAnnotations: