Web app: Configuration

The web app's template folder is set to root (repo root) instead of the usual templates/ folder. The web app loads Kubernetes configuration automatically if it loads inside a Kubernetes context but otherwise skips loading it (this is done to make tests pass). It also requires a secrets.yaml file at root (system root) containing a random credential (in our case, it's an uuid generated on a different host with sufficient entropy).

webhook_secret: <credential>

If no webhook_secret is loaded, the app simply ignores signature validation and redeploys on every valid POST request (this is not recommended, and the option exists to make tests pass outside of production contexts).