update

build.sh

@@ -17,22 +17,9 @@ docker build \
 
 docker push matst80/otel-debug:latest
 
-# Shared key that only keeps strangers from uploading source maps (it is not a
-# real credential). Taken from the environment, else from the cluster secret,
-# else generated and stored there so the deployment can mount it.
-ensure_sourcemap_key() {
-  if [[ -z "${OTEL_SOURCEMAP_KEY:-}" ]]; then
-    OTEL_SOURCEMAP_KEY="$(kubectl get secret otel-sourcemap-key -n monitoring \
-      -o jsonpath='{.data.key}' 2>/dev/null | base64 -d || true)"
-  fi
-  if [[ -z "${OTEL_SOURCEMAP_KEY}" ]]; then
-    OTEL_SOURCEMAP_KEY="$(openssl rand -hex 24)"
-  fi
-  kubectl create secret generic otel-sourcemap-key -n monitoring \
-    --from-literal=key="${OTEL_SOURCEMAP_KEY}" --dry-run=client -o yaml | kubectl apply -f - >/dev/null
-  export OTEL_SOURCEMAP_KEY
-}
-ensure_sourcemap_key
+# Shared key that only keeps strangers from uploading source maps. It is not a
+# secret, so it is hardcoded here and in k8s/deployment.yaml.
+export OTEL_SOURCEMAP_KEY="6901e62e4468631f27f1dc85fd4231f35b5e591c61f5bcfa"
 
 # Roll out first: the new image requires OTEL_SOURCEMAP_KEY, so the manifest has
 # to be applied before uploads, or any pod restart in between rejects them.