Add JWKS_SECRET to environment variables for mock Lambda integration

Author: neil-sproston

.github/workflows/preview-env.yaml

@@ -123,6 +123,7 @@ jobs:
         env:
           MOCK_URL: ${{ steps.names.outputs.mock_preview_url }}
           EXPIRY_THRESHOLD: ${{ secrets.APIM_TOKEN_EXPIRY_THRESHOLD }}
+          JWKS_SECRET: ${{ secrets.JWKS_SECRET }}
           APIM_PRIVATE_KEY: ${{ secrets.APIM_PRIVATE_KEY }}
           APIM_APIKEY: ${{ secrets.APIM_APIKEY }}
           API_MTLS_CERT: ${{ secrets.API_MTLS_CERT }}
@@ -131,6 +132,7 @@ jobs:
           cd pathology-api/target/
           FN="${{ steps.names.outputs.function_name }}"
           EXPIRY_THRESHOLD="${TOKEN_EXPIRY_THRESHOLD:-30s}"
+          JWKS_SECRET="${JWKS_SECRET_NAME:-/cds/pathology/dev/jwks/secret}"
           PRIVATE_KEY="${APIM_PRIVATE_KEY:-/cds/pathology/dev/apim/private-key}"
           API_KEY="${APIM_APIKEY:-/cds/pathology/dev/apim/api-key}"
           MTLS_CERT="${API_MTLS_CERT:-/cds/pathology/dev/mtls/client1-key-public}"
@@ -163,7 +165,8 @@ jobs:
                                         APIM_MTLS_KEY_NAME=$MTLS_KEY, \
                                         APIM_TOKEN_URL=$MOCK_URL/apim, \
                                         PDM_BUNDLE_URL=$MOCK_URL/pdm, \
-                                        MNS_EVENT_URL=$MOCK_URL/mns}" || true
+                                        MNS_EVENT_URL=$MOCK_URL/mns, \
+                                        JWKS_SECRET_NAME=$JWKS_SECRET}" || true
             wait_for_lambda_ready
             aws lambda update-function-code --function-name "$FN" \
               --zip-file "fileb://artifact.zip" \
@@ -181,7 +184,8 @@ jobs:
                                         APIM_MTLS_KEY_NAME=$MTLS_KEY, \
                                         APIM_TOKEN_URL=$MOCK_URL/apim, \
                                         PDM_BUNDLE_URL=$MOCK_URL/pdm, \
-                                        MNS_EVENT_URL=$MOCK_URL/mns}" \
+                                        MNS_EVENT_URL=$MOCK_URL/mns, \
+                                        JWKS_SECRET_NAME=$JWKS_SECRET}" \
               --publish
             wait_for_lambda_ready
           fi