From e395fa71ed8e679bc6722fcdb2051467adc7325c Mon Sep 17 00:00:00 2001 From: Rafael Poyiadzi Date: Tue, 24 Feb 2026 18:38:58 +0000 Subject: [PATCH] Fix JWKS verification failure on staging MCP server Staging was using a different Supabase project than production, so JWTs issued during staging auth were rejected by the production EveryRow API with "No matching signing key found in JWKS". Updated staging secrets to use the production Supabase project/anon key. Also adds a debug-mcp-deploy skill for diagnosing deployment issues. Co-Authored-By: Claude Opus 4.6 --- everyrow-mcp/deploy/chart/secrets.staging.enc.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml b/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml index 9e9ebb4e..fbe120e7 100644 --- a/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml +++ b/everyrow-mcp/deploy/chart/secrets.staging.enc.yaml @@ -1,7 +1,7 @@ secrets: data: - SUPABASE_ANON_KEY: ENC[AES256_GCM,data:G0133IELjhopUvR4RyNK++e1yZEI/+TcDAjxpxLDRT/7mdrDpmv/OhQA4OwupA==,iv:jwc+s1eewq7wMyeuaYN0EUUN5W3PnCmHL/dworfxNSY=,tag:PzN7wu6mv09Vg2amjKqmiw==,type:str] - SUPABASE_URL: ENC[AES256_GCM,data:kbPtxuERBQnnkdA1jZttFZfP40W1GhPiOVTNyzWQF5+qFikwDvk37w==,iv:zsH4J58U8PPQai3gGvTLXO13C0a9uxbqqCW00pjlch0=,tag:p1q07k/cqDKYzzcQyEefPQ==,type:str] + SUPABASE_ANON_KEY: ENC[AES256_GCM,data:O/gqSYAPhpJB4WMAr7D9HnkLT+NjSwN9jcMBW9/MXGpbRxFB72+hY/AIWHvh6A==,iv:fcR1gyF8YBRmYYI8z79r10NVL0KlQnvt6/DCV2x7uXI=,tag:RyWgufxfiFez/LPge96crQ==,type:str] + SUPABASE_URL: ENC[AES256_GCM,data:xGylUJThxPDcaMnpdKfpN1X3tq+zp+eTLGEcXiGGKTIByjV0bZxuow==,iv:0BkTS59QCId/ZykaZKPy0hUK/UDTEIRlHV6cBerD/0A=,tag:7ZiBQMNmMCW5Kb7rH659yA==,type:str] REDIS_SENTINEL_ENDPOINTS: ENC[AES256_GCM,data:TVzm6CBXI8BhCELne88ygHMaiQZcxeTwHUbw7qhZPNc41hg=,iv:QP2lrMEsMEZHqCqQNywGUxgbmb8HBycUGj3pP2b8vwg=,tag:sp8NKF2q8LOJJg/fGmhxbQ==,type:str] REDIS_SENTINEL_MASTER_NAME: ENC[AES256_GCM,data:ok5ySd/JcW4=,iv:vCIUZyvuGwlu5laCUHIBq3gt9XSiTXxqY/wo22G5OtE=,tag:WSQ0qfvDmck5nsD4UXEatQ==,type:str] REDIS_PASSWORD: ENC[AES256_GCM,data:Cgx61Unnp8BCiYRPhLhqjTv7gzp/72M=,iv:IUTcAexUCiB3iR38OtIceeKX+yo/MifBnBCCJz/AtDA=,tag:4OXaJjosbnbZlQL5WtewMg==,type:str] @@ -10,7 +10,7 @@ sops: - resource_id: projects/varuna-400921/locations/global/keyRings/sops/cryptoKeys/sops-key created_at: "2026-02-24T17:16:29Z" enc: CiQA/cVY+wxwbn3to4SujOzX8LvgAMs5XQ3uZ6fzfY4YaAu5bkISSQAXYxKUC27tVeFnPGIN5cht68JZq3LLkXFSHLg0TOge/iIswyoNgsBZKnA9mqXL28d02N4eR1E24UhlBzMPPcw3V1AY3cY+wY8= - lastmodified: "2026-02-24T18:14:37Z" - mac: ENC[AES256_GCM,data:BXAGjvRIPY+pZ9qU2tIr6lrcIW0sxnRmEGrEY6bT9g9RdxrmMl341U6Kx94v6bvc60J8wo2V9DN4uh6raQ4dDcPq5IPmcX3q+TAMuUkHXigFgxEdOcMC22fG/3KzloQOlvNJPtJ1RdZvFl35cIvmCRcmLwZGNKDUp4//Cfdr6Pg=,iv:VMEyxU8kqY0sSRVZO3IwhmN01Qa8ijpmyMhUSbGWf/g=,tag:cgfofdnDfFPXUlNuELLKmg==,type:str] + lastmodified: "2026-02-24T18:34:51Z" + mac: ENC[AES256_GCM,data:inP810beROY5DGGB8ob295p17WnLQdtt9zDHBIFQMOMo6L1ZxYWZMyRpUVhau/gaNe9BrpDw+GldloTKiHEUgcZW+DyJXrbawEJ4vF+TJZUy8MPlQYGPal3yxNJ4T10w5IJQiKUeKtpuW8BvHAqQWlWlpbcd+WjVcXYkIn1HcOA=,iv:yS49RNbfZz1tDIvcyxAIcbth0RiFR6feUzOWi7rD5Rg=,tag:l5e3Mfz+4552qcVmdnk+Hw==,type:str] unencrypted_suffix: _unencrypted version: 3.11.0