feat(plataforma): Purchase pelo servidor ligado (Meta CAPI + GA4 MP); segredos selados em conversao-credentials

2026-09-30 01:46:54 +00:00
parent 8a4f59da2a
commit ff639b136d
2 changed files with 26 additions and 0 deletions
@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: conversao-credentials
+  namespace: plataforma-prod
+spec:
+  encryptedData:
+    ga4-segredo: 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
+    meta-token: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: conversao-credentials
+      namespace: plataforma-prod
@@ -85,6 +85,16 @@ spec:
          volumeMounts:
            - { name: gitops, mountPath: /gitops }
          env:
+            # Purchase pelo servidor (ConversaoNoServidor). Os IDs sao publicos (os
+            # mesmos da landing); token e segredo vem do SealedSecret conversao-credentials.
+            - { name: ATM_CONVERSAO_META_PIXEL_ID, value: "1697857761759110" }
+            - name: ATM_CONVERSAO_META_TOKEN
+              valueFrom:
+                secretKeyRef: { name: conversao-credentials, key: meta-token }
+            - { name: ATM_CONVERSAO_GA4_MEDICAO, value: "G-NLM3ESK4E9" }
+            - name: ATM_CONVERSAO_GA4_SEGREDO
+              valueFrom:
+                secretKeyRef: { name: conversao-credentials, key: ga4-segredo }
            # N16 — a chave de que sai o token de CADA tenant (HMAC do nome; ChaveDoResumo).
            # Sem ela o captacao recusa todo resumo (401) e o provisionamento nao sela o
            # resumo-credentials do tenant novo. Selada em 08-sealed-resumo-chave.yaml.