Hasura integration with squids

[DaMandal0rian]

PR Type

enhancement, configuration changes

---

Description

• Added hasura_graphql_admin_secret variable to multiple Terraform configurations.
• Introduced Hasura GraphQL engine service to Docker Compose files for both Nova Squid and Squid nodes.
• Configured environment variables and exposed port 8080 for Hasura service.
• Aligned existing variables for better readability.

---

Changes walkthrough 📝

	Relevant files
Configuration changes	main.tf Add Hasura GraphQL admin secret to module configuration    explorer/terraform/aws/gemini-3h/main.tf Added hasura_graphql_admin_secret variable to module configuration. Aligned existing variables for better readability. +13/-12  variables.tf Introduce Hasura GraphQL admin secret variable                      explorer/terraform/aws/gemini-3h/variables.tf Introduced new variable hasura_graphql_admin_secret. +5/-0      bootstrap_nova_squid_provisioner.tf Add Hasura GraphQL admin secret to Nova Squid provisioner templates/terraform/explorer/base/bootstrap_nova_squid_provisioner.tf Added HASURA_GRAPHQL_ADMIN_SECRET to environment variables. +1/-0      bootstrap_squid_provisioner.tf Add Hasura GraphQL admin secret to Squid provisioner          templates/terraform/explorer/base/bootstrap_squid_provisioner.tf Added HASURA_GRAPHQL_ADMIN_SECRET to environment variables. +1/-0      variables.tf Introduce Hasura GraphQL admin secret variable                      templates/terraform/explorer/base/variables.tf Introduced new variable hasura_graphql_admin_secret. +5/-0      terraform.tfvars.example Add example entry for Hasura GraphQL admin secret                explorer/terraform/aws/gemini-3h/terraform.tfvars.example Added example entry for hasura_graphql_admin_secret. +1/-0
Enhancement	create_nova_squid_node_compose_file.sh Add Hasura GraphQL engine service to Nova Squid Docker Compose templates/terraform/explorer/base/scripts/create_nova_squid_node_compose_file.sh Added Hasura GraphQL engine service to Docker Compose. Configured environment variables for Hasura service. Exposed port 8080 for Hasura service. +25/-1    create_squid_node_compose_file.sh Add Hasura GraphQL engine service to Squid Docker Compose templates/terraform/explorer/base/scripts/create_squid_node_compose_file.sh Added Hasura GraphQL engine service to Docker Compose. Configured environment variables for Hasura service. Exposed port 8080 for Hasura service. +25/-1

---

💡 PR-Agent usage:
Comment /help on the PR to get a list of all available PR-Agent tools and their descriptions

[github-actions]

PR Reviewer Guide 🔍

⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪

🧪 No relevant tests

🔒 Security concerns Sensitive information exposure: The hasura_graphql_admin_secret is added to various configurations and scripts. Ensure that this secret is handled securely through all layers and not exposed in logs or error messages.

⚡ Key issues to review Hardcoded Version The Hasura GraphQL engine image version is hardcoded to v2.40.0. Consider using a variable to manage the version to facilitate easier updates and version management. Debug Mode Enabled The Hasura GraphQL DEV_MODE is set to "true", which is not recommended for production environments. Ensure this is conditional based on the environment. Port Conflict The port mapping for PostgreSQL has been changed from 8080 to 9080, potentially leading to conflicts or misconfiguration in environments expecting the old port.

[github-actions]

PR Code Suggestions ✨

Category	Suggestion	Score
Best practice	Disable development features in production for security and performance Consider disabling the Hasura GraphQL console and dev mode in production environments to enhance security and performance. templates/terraform/explorer/base/scripts/create_nova_squid_node_compose_file.sh [95-97] -HASURA_GRAPHQL_ENABLE_CONSOLE: "true" # set "false" to disable console -HASURA_GRAPHQL_DEV_MODE: "true" +HASURA_GRAPHQL_ENABLE_CONSOLE: "false" # set "false" to disable console +HASURA_GRAPHQL_DEV_MODE: "false" Suggestion importance[1-10]: 8 Why: Disabling the Hasura GraphQL console and dev mode in production is a good practice to enhance security and performance.	8
	Use version constraints for dependencies to avoid compatibility issues Consider using a more specific version or a version constraint for the Hasura GraphQL engine to avoid potential compatibility issues with future versions. templates/terraform/explorer/base/scripts/create_nova_squid_node_compose_file.sh [87] -image: hasura/graphql-engine:v2.40.0 +image: hasura/graphql-engine:~v2.40 Suggestion importance[1-10]: 7 Why: Using version constraints for dependencies is a good practice to avoid potential compatibility issues with future versions.	7
Security	Manage admin secrets securely Ensure that the HASURA_GRAPHQL_ADMIN_SECRET is not hardcoded and is securely managed, possibly using a secrets management tool. templates/terraform/explorer/base/scripts/create_nova_squid_node_compose_file.sh [101] -HASURA_GRAPHQL_ADMIN_SECRET: \${HASURA_GRAPHQL_ADMIN_SECRET} +HASURA_GRAPHQL_ADMIN_SECRET: \${HASURA_GRAPHQL_ADMIN_SECRET} # Ensure this is managed securely Suggestion importance[1-10]: 3 Why: The suggestion to ensure the admin secret is managed securely is valid, but the improved code only adds a comment without implementing a secure management solution.	3

[marc-aurele-besner]

LGTM