cmd/relui: fetch Twitter API secret in production deployment

Use flag code from CL 386054 to define a -twitter-api-secret flag.
In the production deployment, configure it to fetch the Twitter API
credentials for making tweets at twitter.com/golang, and reconfigure
the site header accordingly.

Tested locally via "secret:go-dashboard-dev/staging-twitter-api-secret"
as the -twitter-api-secret flag value.

For golang/go#47402.
Fixes golang/go#51122.

Change-Id: Ib2fcf5cd9add14f954cac4eddab3d6fa6032eb02
Reviewed-on: https://go-review.googlesource.com/c/build/+/387274
Trust: Dmitri Shuralyov <[email protected]>
Reviewed-by: Heschi Kreinick <[email protected]>
Reviewed-by: Alex Rakoczy <[email protected]>

Author: dmitshur

cmd/relui/deployment-prod.yaml

@@ -25,6 +25,10 @@ spec:
             - "./relui"
             - "--listen-https-selfsigned=:444"
             - "--base-url=https://build.golang.org/releases"
+            # Define the site header and external service configuration.
+            - "--site-title=Go Releases"
+            - "--site-header-css=Site-header--production"
+            - "--twitter-api-secret=secret:symbolic-datum-552/twitter-api-secret"
           ports:
             - containerPort: 444
           env:

cmd/relui/main.go

@@ -14,19 +14,29 @@ import (
 	"github.com/jackc/pgx/v4/pgxpool"
 	"golang.org/x/build/internal/https"
 	"golang.org/x/build/internal/relui"
+	"golang.org/x/build/internal/secret"
 	"golang.org/x/build/internal/task"
 )
 
 var (
-	baseURL     = flag.String("base-url", "", "Prefix URL for routing and links.")
+	baseURL       = flag.String("base-url", "", "Prefix URL for routing and links.")
+	siteTitle     = flag.String("site-title", "Go Releases", "Site title.")
+	siteHeaderCSS = flag.String("site-header-css", "", "Site header CSS class name. Can be used to pick a look for the header.")
+
 	downUp      = flag.Bool("migrate-down-up", false, "Run all Up migration steps, then the last down migration step, followed by the final up migration. Exits after completion.")
 	migrateOnly = flag.Bool("migrate-only", false, "Exit after running migrations. Migrations are run by default.")
 	pgConnect   = flag.String("pg-connect", "", "Postgres connection string or URI. If empty, libpq connection defaults are used.")
 )
 
 func main() {
+	if err := secret.InitFlagSupport(context.Background()); err != nil {
+		log.Fatalln(err)
+	}
+	var twitterAPI secret.TwitterCredentials
+	secret.JSONVarFlag(&twitterAPI, "twitter-api-secret", "Twitter API secret to use for workflows involving tweeting.")
 	https.RegisterFlags(flag.CommandLine)
 	flag.Parse()
+
 	ctx := context.Background()
 	if err := relui.InitDB(ctx, *pgConnect); err != nil {
 		log.Fatalf("relui.InitDB() = %v", err)
@@ -47,13 +57,12 @@ func main() {
 	// Keep these appropriately in sync.
 	var (
 		siteHeader = relui.SiteHeader{
-			Title:    "Go Releases (work in progress)",
-			CSSClass: "Site-header--workInProgress",
+			Title:    *siteTitle,
+			CSSClass: *siteHeaderCSS,
 		}
 		extCfg = task.ExternalConfig{
-			// TODO(go.dev/issue/51122): Once secrets are available from prod deployment and we're ready, pass them here.
 			// TODO(go.dev/issue/51150): When twitter client creation is factored out from task package, update code here.
-			DryRun: true,
+			TwitterAPI: twitterAPI,
 		}
 	)
 

internal/relui/static/styles.css

@@ -43,15 +43,13 @@ h6 {
 }
 .Header {
   padding: 0.625rem;
+  background: #d6d6d6;
+  color: #171d27;
 }
 .Site-header--production .Header {
   background: #e0ebf5;
   color: #375eab;
 }
-.Site-header--workInProgress .Header {
-  background: #d6d6d6;
-  color: #171d27;
-}
 .Header-title {
   font-size: 1.5rem;
   margin: 0;