Pattern: Signature validation via Replicated SDK

[adamancini]

Show an example of pulling license data, preferably a custom LicenseField, into the application and validate its signature.

Bonus points if the application changes behaviour based on the license data (to show that changing a license syncs to the cluster and changes app behaviour).

For example: a license expires or a Boolean field set to False causes a feature to stop working.

[adamancini]

#138

[jmboby]

@adamancini - custom license field signature validation example can also be found here - https://github.com/replicatedhq/platform-examples/blob/main/applications/flipt/chart/templates/license-sync-configmap.yaml#L42-L83

It's a cronjob running every 1min that polls the local Replicated SDK API and validates the public key before consuming the custom field, I've tested changing the license field on-the-fly in Vendor Portal and confirms it sync's on the next cronjob trigger.

Flipt consumes this custom license field and applies it to a feature flag within Flipt, upon changing the license field in VP we see this reflected in Flipt within the next cronjob run.