email_safe_list

docker/settings.py

@@ -106,6 +106,8 @@
 EMAIL_USE_TLS=True
 if os.getenv("SAFE_EMAIL_RECIPIENT", None):
     SAFE_EMAIL_RECIPIENT = os.getenv("SAFE_EMAIL_RECIPIENT")
+    SAFE_EMAIL_SAFELIST = [s.strip() for s in os.getenv(
+        'SAFE_EMAIL_SAFELIST', '').split(',')]
     EMAIL_BACKEND = 'saferecipient.EmailBackend'
     EMAIL_NOREPLY_ADDRESS = 'Service Endorsement <[email protected]>'
 else:

docker/test-values.yml

@@ -112,8 +112,6 @@ environmentVariables:
     value: https://test.provision.uw.edu/saml
   - name: CLUSTER_CNAME
     value: test.provision.uw.edu
-  - name: SAFE_EMAIL_RECIPIENT
-    value: "[email protected]"
 externalSecrets:
   enabled: true
   secrets:
@@ -126,6 +124,10 @@ externalSecrets:
           property: email-host
         - name: msca-subscription-key
           property: msca-subscription-key
+        - name: safe-email-recipient
+          property: safe-email-recipient
+        - name: safe-email-safelist
+          property: safe-email-safelist
     - name: test.provision.uw.edu-sql-secret
       externalKey: provision/test/sql-secret
       data:
@@ -158,6 +160,14 @@ environmentVariablesSecrets:
     name: MSCA_SUBSCRIPTION_KEY
     secretName: test.provision.uw.edu-secrets
     secretKey: msca-subscription-key
+  SafeEmailRecipient:
+    name: SAFE_EMAIL_RECIPIENT
+    secretName: test.provision.uw.edu-secrets
+    secretKey: safe-email-recipient
+  SafeEmailSafelist:
+    name: SAFE_EMAIL_SAFELIST
+    secretName: test.provision.uw.edu-secrets
+    secretKey: safe-email-safelist
   SAMLServiceProviderCert:
     name: SP_CERT
     secretName: test.provision.uw.edu-ic-certs