Add package manager secret

Author: pbiggar

scripts/deployment/setup-packages

@@ -5,6 +5,7 @@ set -euo pipefail
 
 db_username=$(gcloud secrets versions access latest --secret db-username)
 db_password=$(gcloud secrets versions access latest --secret db-password)
+packages_password=$(gcloud secrets versions access latest --secret packages-darklang-com-auth-password)
 db_host=pub-us-central1.1c39714c-062a-40f3-b7ba-e320fce7ca3d.gcp.ybdb.io
 db_port=5433
 db_name=yugabyte
@@ -57,7 +58,7 @@ run_canvas_hack() {
   DARK_CONFIG_TELEMETRY_EXPORTER=none \
   DARK_CONFIG_ROLLBAR_ENABLED=n \
   DARK_CONFIG_LAUNCHDARKLY_SDK_API_KEY=none \
-  backend/Build/out/CanvasHack/Debug/net8.0/CanvasHack "$1"
+  backend/Build/out/CanvasHack/Debug/net8.0/CanvasHack "$@"
 }
 
 
@@ -84,7 +85,7 @@ case $1 in
   # Must install the packages before adding the canvases or they'll fail in the name resolver
   4)
     echo "4. Add canvas"
-    run_canvas_hack dark-packages
+    run_canvas_hack load-from-disk dark-packages "AUTH_PASSWORD=$packages_password"
     canvasID='11111111-1111-1111-1111-111111111112'
     domain='packages.darklang.com'
     exec_sql "INSERT INTO domains_v0 (canvas_id, domain) VALUES ('$canvasID'::uuid, '$domain')"

tf/secrets.tf

@@ -16,7 +16,8 @@ variable "secret_names" {
     "allowed-dark-internal-canvas-ids",
     "prodexec-chisel-username",
     "prodexec-chisel-password",
-    "prodexec-ssh-password"
+    "prodexec-ssh-password",
+    "packages-darklang-com-auth-password"
   ]
 }