Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(postgres_db): rename key vault secret for environment consistency #6695

Merged
merged 1 commit into from
Oct 5, 2023

Conversation

alismx
Copy link
Collaborator

@alismx alismx commented Oct 5, 2023

DEVOPS PULL REQUEST

Related Issue

  • This resolves an issue where the vault data object is pulled from the wrong vault key. When the vault key value for dev1 was updated, that new value it was pulled in and propagated to dev4 during a deployment.

Changes Proposed

  • This changes the secret that all dev environments look at to determine their password from simple-report-dev-db-password to simple-report-dev4-db-password, which is environment specific.

Testing

  • We need to run Terraform plans against dev2 through dev7 environments to ensure that Terraform is no longer trying to change the database password. dev4 is an exception; we want dev4 to change its password to the value associated with its password key.
  • dev2 plan. ✔️
  • dev3 plan. ✔️
  • dev4 plan. ✔️
  • dev5 plan. ✔️
  • dev6 plan. ✔️
  • dev7 plan. ✔️

Checklist for Primary Reviewer

Infrastructure

  • Consult the results of the terraform-plan job inside the "Terraform Checks" workflow run for this PR. Confirm that there are no unexpected changes!

Security

  • Changes with security implications have been approved by a security engineer (changes to authentication, encryption, handling of PII, etc.)
  • Any dependencies introduced have been vetted and discussed

Cloud

  • Oncall has been notified if this change is going in after-hours
  • If there are changes that cannot be tested locally, this has been deployed to our Azure test, dev, or pentest environment for verification

Documentation

  • Any changes to the startup configuration have been documented in the README

@sonarqubecloud
Copy link

sonarqubecloud bot commented Oct 5, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@alismx alismx marked this pull request as ready for review October 5, 2023 15:44
@alismx alismx enabled auto-merge October 5, 2023 16:54
@alismx alismx temporarily deployed to dev4 October 5, 2023 17:20 — with GitHub Actions Inactive
@alismx alismx temporarily deployed to dev5 October 5, 2023 17:20 — with GitHub Actions Inactive
@alismx alismx temporarily deployed to dev5 October 5, 2023 17:29 — with GitHub Actions Inactive
@alismx alismx temporarily deployed to dev4 October 5, 2023 17:37 — with GitHub Actions Inactive
@alismx alismx temporarily deployed to dev4 October 5, 2023 17:46 — with GitHub Actions Inactive
@alismx alismx added this pull request to the merge queue Oct 5, 2023
Copy link
Contributor

@zdeveloper zdeveloper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for deploying to a real env

@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Oct 5, 2023
@fzhao99 fzhao99 added this pull request to the merge queue Oct 5, 2023
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Oct 5, 2023
@fzhao99 fzhao99 added this pull request to the merge queue Oct 5, 2023
Merged via the queue into main with commit 295bb12 Oct 5, 2023
@fzhao99 fzhao99 deleted the alis/dev_pw_fix branch October 5, 2023 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants