Merge pull request #100 from companieshouse/vault-path-update

Update Vault path for consistency with other stacks
companieshouse · Apr 23, 2024 · f71b8a0 · f71b8a0
2 parents 428e406 + 70abc06
commit f71b8a0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/roles/deploy/README.md b/roles/deploy/README.md
@@ -70,7 +70,7 @@ ansible-playbook -i inventory --extra-vars='{"tuxedo_service_users": ["ceu"]}'
 Oracle Database configuration is retrieved from Hashicorp Vault for each item specified in the `required_databases` parameter list for a given set of Tuxedo services (see [Services][3]). For each item specified in this list, a Vault key is expected to be present at a path that uses the following pattern:
 
 ```
-applications/heritage-<environment-name>-eu-west-2/tuxedo/database/<database-reference>
+applications/heritage-<environment-name>-eu-west-2/chl-tuxedo/database/<database-reference>
 ```
 
 Where `<environment-name>` is the actual name of the environment the configuration relates to and `<database-reference>` matches the `required_databases` list item name.

diff --git a/roles/deploy/tasks/deploy.yml b/roles/deploy/tasks/deploy.yml
@@ -2,7 +2,7 @@
 
 - name: Retrieve service-specific database credentials from Hashicorp Vault
   set_fact:
-    "{{ item }}_db_credentials": "{{ lookup('community.hashi_vault.hashi_vault', 'applications/heritage-{{ environment_name }}-eu-west-2/tuxedo/database/{{ item }}') }}"
+    "{{ item }}_db_credentials": "{{ lookup('community.hashi_vault.hashi_vault', 'applications/heritage-{{ environment_name }}-eu-west-2/chl-tuxedo/database/{{ item }}') }}"
   no_log: True
   loop: "{{ tuxedo_service_config[tuxedo_user].required_databases | default([]) }}"