Merge branch 'main' of https://github.com/ministryofjustice/modernisa…

…tion-platform-configuration-management

.github/workflows/delius-iaps-ad-admin-rotate.yml

@@ -4,6 +4,11 @@ permissions:
   id-token: write  # This is required for requesting the JWT
   contents: read  # This is required for actions/checkout
 on:
+  schedule:
+    # every day at 1am
+    - cron: '0 1 * * *'
+    # every day at 2am
+    - cron: '0 2 * * *'
   workflow_dispatch:
     inputs:
       environment:
@@ -23,28 +28,32 @@ jobs:
           sudo pip3 install awscli
 
       - name: Configure AWS Credentials
+        if: github.event.inputs.environment == 'PREPRODUCTION' || github.event.schedule == '0 1 * * *'
         uses: aws-actions/configure-aws-credentials@e1e17a757e536f70e52b5a12b2e8d1d1c60e04ef  # v2.0.0
         with:
-          role-to-assume: "arn:aws:iam::${{ secrets.IAPS_PRODUCTION_ACCOUNT_ID }}:role/ci-data-refresher"
+          role-to-assume: "arn:aws:iam::${{ secrets.IAPS_PREPRODUCTION_ACCOUNT_ID }}:role/ci-secrets-rotator"
           role-session-name: githubactionsrolesession
           aws-region: "eu-west-2"
-        if: ${{ github.event.inputs.envrioment }} == 'PRODUCTION'\
+
       - name: Configure AWS Credentials
+        if: github.event.inputs.environment == 'PRODUCTION' || github.event.schedule == '0 2 * * *'
         uses: aws-actions/configure-aws-credentials@e1e17a757e536f70e52b5a12b2e8d1d1c60e04ef  # v2.0.0
         with:
-          role-to-assume: "arn:aws:iam::${{ secrets.IAPS_PREPRODUCTION_ACCOUNT_ID }}:role/ci-data-refresher"
+          role-to-assume: "arn:aws:iam::${{ secrets.IAPS_PRODUCTION_ACCOUNT_ID }}:role/ci-secrets-rotator"
           role-session-name: githubactionsrolesession
           aws-region: "eu-west-2"
-        if: ${{ github.event.inputs.envrioment }} == 'PREPRODUCTION'
+
       - name: Generate new password
         id: generate_password
         run: |
           PASSWORD=$(openssl rand -base64 32)
           echo "::add-mask::$PASSWORD" 
           echo "PASSWORD=$PASSWORD" >> $GITHUB_ENV
+
       - name: Reset admin password
         run: |
-          aws ds reset-user-password --user-name Admin --new-password $PASSWORD
+          DIRECTORY_ID=$(aws ds describe-directories --region eu-west-2 --query 'DirectoryDescriptions[0].DirectoryId' --output text) && aws ds reset-user-password --user-name Admin --new-password $PASSWORD --directory-id $DIRECTORY_ID
+
       - name: Store password in secrets
         run: |
-           aws secretsmanager put-secret-value --secret-id delius-iaps-ad-admin-password --secret-string $PASSWORD
+           aws secretsmanager put-secret-value --secret-id delius-iaps-ad-password --secret-string $PASSWORD

.github/workflows/delius-iaps-data-refresh.yml

@@ -64,9 +64,9 @@ jobs:
 
       - name: Wait for RDS Snapshot to be ready
         run: |
-          while true; do
+          for run in {1..5}; do
             aws rds wait db-snapshot-available \
-              --db-snapshot-identifier "${{ env.SNAPSHOT_NAME }}" && break || sleep 30
+              --db-snapshot-identifier "${{ env.SNAPSHOT_NAME }}" && break || sleep 10 * run
           done
               
       - name: Share RDS snapshot with Pre-Prod
@@ -97,9 +97,9 @@ jobs:
 
       - name: Wait for RDS Snapshot to be ready in Pre-Prod
         run: |
-          while true; do
+          for run in {1..5}; do
             aws rds wait db-snapshot-available \
-              --db-snapshot-identifier "${{ env.FINAL_SNAPSHOT_NAME }}" && break || sleep 30
+              --db-snapshot-identifier "${{ env.FINAL_SNAPSHOT_NAME }}" && break || sleep 10 * run
           done
 
       - name: Store identifier in SSM parameter store

README.md

@@ -1,5 +1,6 @@
 # Modernisation Platform Configuration Management
-[![repo standards badge](https://img.shields.io/badge/dynamic/json?color=blue&style=for-the-badge&logo=github&label=MoJ%20Compliant&query=%24.result&url=https%3A%2F%2Foperations-engineering-reports.cloud-platform.service.justice.gov.uk%2Fapi%2Fv1%2Fcompliant_public_repositories%2Fmodernisation-platform-configuration-management)](https://operations-engineering-reports.cloud-platform.service.justice.gov.uk/public-github-repositories.html#modernisation-platform-configuration-management "Link to report")
+
+[![repo standards badge](https://img.shields.io/endpoint?labelColor=231f20&color=005ea5&style=for-the-badge&label=MoJ%20Compliant&url=https%3A%2F%2Foperations-engineering-reports.cloud-platform.service.justice.gov.uk%2Fapi%2Fv1%2Fcompliant_public_repositories%2Fendpoint%2Fmodernisation-platform-configuration-management&logo=data:image/png;base64,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)](https://operations-engineering-reports.cloud-platform.service.justice.gov.uk/public-report/modernisation-platform-configuration-management)
 
 ## About this repository
 

ansible/README.md

@@ -37,6 +37,21 @@ ansible-galaxy role install -r requirements.yml
 ansible-galaxy collection install -r requirements.yml
 ```
 
+Run:
+
+```
+pip list
+pip3 list
+```
+
+If the **boto3** and **botocore** packages are only listed in `pip3 list` you might hit some errors when running Ansible.
+
+To fix this, run:
+
+```
+pip install boto3 botocore
+```
+
 Ensure your ~/.aws/config contains your environment details, example [config] (https://github.com/ministryofjustice/dso-useful-stuff/blob/main/aws-cli/.aws/config)
 
 Sign into [AWS SSO](https://moj.awsapps.com/start/) and select

ansible/group_vars/all.yml

@@ -0,0 +1,7 @@
+# The below variables are either set automatically from tags via dynamic
+# inventory, or passed in to command line via extra_vars parameter when
+# running locally.  Setting dummy values here to ensure the ansible doesn't
+# crash out if they aren't set, e.g. when running AMI builds
+ec2_name: "no_name" # the tags.Name on either EC2 or AutoScalingGroup
+aws_environment: "no_environment" # development, test, preproduction or production
+application: "no_application" # the aws account minus the environment, e.g. nomis

ansible/group_vars/ami_delius_core_ol_8_5_oracle_db_19c.yml

@@ -24,9 +24,8 @@ ami_roles_list:
   - packages # Perform any updates to existing if there are no new packages to install
   # - amazon-ssm-agent # for ec2patch only (if version has changed)
   - disks
-  # - script-exporter
   - oracle-19c
-  # - oracle-secure-web
+  # - oracle-secure-backup
   # - db-restore
 
 ansible_aws_ssm_bucket_name: mod-platform-image-artefact-bucket20230203091453221500000001

ansible/group_vars/ami_hmpps_ol_8_5_oracledb_19c.yml

@@ -1,5 +1,6 @@
 ---
 ansible_python_interpreter: /usr/bin/python3.9
+database_home: /u01/app/oracle/product/19c/db_1
 
 users_and_groups_system:
   - name: oracle

ansible/group_vars/ami_nomis_rhel_7_9_oracledb_11_2.yml

@@ -1,7 +1,6 @@
 ---
 ansible_python_interpreter: /usr/local/bin/python3.9
-
-image_builder_s3_bucket_name: ec2-image-builder-nomis20220314103938567000000001
+database_home: /u01/app/oracle/product/11.2.0.4/db_1
 
 patch_vars_filename: nomis-patches-20211019.yml
 
@@ -60,7 +59,7 @@ ami_roles_list:
   - hugepages
   - disks
   - oracle-11g
-  - oracle-secure-web
+  - oracle-secure-backup
 
 # the below vars are defined in multiple groups.  Keep the values the same to avoid unexpected behaviour
 roles_list: "{{ (ami_roles_list | default([]) | difference(server_type_roles_list | default([]))) + (server_type_roles_list | default([])) }}"

ansible/group_vars/ami_oasys_rhel_7_9_oracledb_11_2.yml

@@ -61,7 +61,7 @@ ami_roles_list:
   - hugepages
   - disks
   - oracle-11g
-  - oracle-secure-web
+  - oracle-secure-backup
 
 # the below vars are defined in multiple groups.  Keep the values the same to avoid unexpected behaviour
 roles_list: "{{ (ami_roles_list | default([]) | difference(server_type_roles_list | default([]))) + (server_type_roles_list | default([])) }}"

ansible/group_vars/aws_ec2.yml

@@ -2,4 +2,3 @@ ansible_connection: community.aws.aws_ssm
 ansible_aws_ssm_timeout: 300 # long enough for operations that don't support async, e.g. unarchive
 ansible_aws_ssm_reconnection_retries: 0 # Retrying doesn't work well with shell commands that timeout, better to fail immediately.
 ansible_aws_ssm_region: eu-west-2
-instance_id: "{{ hostvars[inventory_hostname].instance_id }}" # for scenarios where {{ ansible_host }} is set to the ip address rather than instance_id

ansible/group_vars/environment_name_corporate_staff_rostering_development.yml

@@ -2,3 +2,6 @@
 ansible_aws_ssm_bucket_name: s3-bucket20230609090952135600000001
 image_builder_s3_bucket_name: csr-software20230609090942172100000002
 dns_zone_internal: corporate-staff-rostering.hmpps-development.modernisation-platform.internal
+dns_search_domains:
+  - hmpps-oem.hmpps-development.modernisation-platform.internal
+  - azure.noms.root

ansible/group_vars/environment_name_corporate_staff_rostering_preproduction.yml

@@ -2,3 +2,6 @@
 ansible_aws_ssm_bucket_name: s3-bucket20230609110811735400000001
 image_builder_s3_bucket_name: csr-software20230609090942172100000002
 dns_zone_internal: corporate-staff-rostering.hmpps-preproduction.modernisation-platform.internal
+dns_search_domains:
+  - hmpps-oem.hmpps-preproduction.modernisation-platform.internal
+  - azure.hmpp.root

ansible/group_vars/environment_name_corporate_staff_rostering_production.yml

@@ -2,3 +2,6 @@
 ansible_aws_ssm_bucket_name: s3-bucket20230609110809465800000001
 image_builder_s3_bucket_name: csr-software20230609090942172100000002
 dns_zone_internal: corporate-staff-rostering.hmpps-production.modernisation-platform.internal
+dns_search_domains:
+  - hmpps-oem.hmpps-production.modernisation-platform.internal
+  - azure.hmpp.root

ansible/group_vars/environment_name_corporate_staff_rostering_test.yml

@@ -1,4 +1,36 @@
 ---
 ansible_aws_ssm_bucket_name: s3-bucket20230609090941956900000001
 image_builder_s3_bucket_name: csr-software20230609090942172100000002
+db_backup_s3_bucket_name: csr-db-backup-bucket20230822131811925900000001
 dns_zone_internal: corporate-staff-rostering.hmpps-test.modernisation-platform.internal
+dns_search_domains:
+  - hmpps-oem.hmpps-test.modernisation-platform.internal
+  - azure.noms.root
+
+# OEM server
+OMS_SERVER: test-oem-a.hmpps-oem.hmpps-test.modernisation-platform.internal
+OEM_AGENT_VERSION: 13.5.0.0.0
+
+# rman details
+rman_backup_script: rman_backup.sh
+recovery_catalog: 1
+recovery_catalog_server: "{{ OMS_SERVER }}"
+rman_backup_cron:
+  backup_level_0:
+    - name: rman_backup_weekly
+      weekday: "5"
+      minute: "30"
+      hour: "17"
+      # job: command generated in rman-backup-setup
+  backup_level_1:
+    - name: rman_backup_daily
+      weekday: "0,1,2,3,4,6"
+      minute: "30"
+      hour: "17"
+      # job: command generated in rman-backup-setup
+  monitoring:
+    - name: rman_backup_monitoring
+      weekday: "*"
+      minute: "30"
+      hour: "*"
+      job: "su oracle -c '/home/oracle/admin/rman_scripts/{{ rman_backup_monitoring_script }}' | logger -p local3.info -t rman-backup"

ansible/group_vars/environment_name_delius_core_development.yml

@@ -1,2 +1,97 @@
 ---
-null_var: null # not used, we just need something in the file to avoid failure
+# From hmpps-env-configs/delius-core-dev/ansible/all.yml
+region: eu-west-2
+project_name: delius-core
+environment_name: delius-core-dev
+simple_environment_name: dev
+ndelius_version: "5.8.7"
+catalog: DCAT
+data_classification: unclassified-data
+database_autotasks:
+  sql_tuning_advisor: disabled
+  auto_space_advisor: disabled
+autotask_windows:
+  weekday:
+    start_time: "06:20"
+    duration_mins: 30
+database_parameters:
+  sga_max_size: 3280M
+  sga_target: 3280M
+  pga_aggregate_target: 1640M
+  pga_aggregate_limit: 3280M
+oracle_osbws_chunk_size: 104857600
+emctl_agent: /u01/app/oracle/oem13c_agent/agent_inst/bin/emctl
+# Buckets
+db_backup_s3_bucket_name: "{{ simple_environment_name }}-oracle-db-backups"
+dependencies_bucket:
+  name: mod-platform-image-artefact-bucket20230203091453221500000001
+  arn: arn:aws:s3:::mod-platform-image-artefact-bucket20230203091453221500000001
+
+# From hmpps-env-configs/delius-core-dev/ansible/delius_primarydb.yml
+primarydb:
+  database_global_database: DNDA
+  database_taf_service: DNDA_TAF
+  database_primary_unique: DNDA
+  database_primary_sid: DNDA
+  delius_users:
+    dbull_ro:
+    nmcmahon_ro:
+    mrees_ro:
+    ahaslehurst_ro:
+    bbuchan_ro:
+      ash_report: true
+    bbuchan_dba:
+    rsingh_dba:
+    dreid_dba:
+    sgandalwar_dba:
+    kmoss_dba:
+    worr_sro:
+  oracle_software:
+    version: 19.18
+    combo_patch: p34773504_190000_Linux-x86-64.zip
+    opatch:
+      version: 12.2.0.1.36
+      filename: p6880880_190000_Linux-x86-64.12.2.0.1.36.zip
+  audited_interaction_repo: TSTNDA
+  database_locked_statistics:
+    - schema_name: DELIUS_APP_SCHEMA
+      table_names:
+        - DOC_MIGRATION_QUEUE_TAB: ALL
+  required_patches:
+    p35012866:
+      patch_files:
+        - target_version: "19.18"
+          filename: p35012866_1918000DBRU_Linux-x86-64.zip
+      description: "BUG_33527739_APPLY.SQL GOT ORA-13516: AWR OPERATION FAILED: CATPROC NOT VALID"
+      grid_patch: false
+      database_patch: true
+      datapatch_required: true
+
+# From hmpps-env-configs/delius-core-dev/ansible/delius_standbydb1.yml
+standbydb1:
+  database_standby_unique: DNDAS1
+  database_standby_sid: DNDAS1
+  required_patches:
+    p35012866:
+      patch_files:
+        - target_version: "19.18"
+          filename: p35012866_1918000DBRU_Linux-x86-64.zip
+      description: "BUG_33527739_APPLY.SQL GOT ORA-13516: AWR OPERATION FAILED: CATPROC NOT VALID"
+      grid_patch: false
+      database_patch: true
+      datapatch_required: true
+
+# From hmpps-env-configs/delius-core-dev/ansible/delius_standbydb2.yml
+standbydb2:
+  database_standby_unique: DNDAS2
+  database_standby_sid: DNDAS2
+  active_data_guard: true
+  required_patches:
+    p35012866:
+      patch_files:
+        - target_version: "19.18"
+          filename: p35012866_1918000DBRU_Linux-x86-64.zip
+      description: "BUG_33527739_APPLY.SQL GOT ORA-13516: AWR OPERATION FAILED: CATPROC NOT VALID"
+      grid_patch: false
+      database_patch: true
+      datapatch_required: true

ansible/group_vars/environment_name_delius_core_development_dev_all.yml

@@ -0,0 +1,34 @@
+---
+# From hmpps-env-configs/delius-core-dev/ansible/all.yml
+region: eu-west-2
+project_name: delius-core
+environment_name: delius-core-dev
+simple_environment_name: dev
+ndelius_version: "5.8.10"
+catalog: DCAT
+data_classification: unclassified-data
+database_autotasks:
+  sql_tuning_advisor: disabled
+  auto_space_advisor: disabled
+autotask_windows:
+  weekday:
+    start_time: "06:20"
+    duration_mins: 30
+database_parameters:
+  sga_max_size: 3280M
+  sga_target: 3280M
+  pga_aggregate_target: 1640M
+  pga_aggregate_limit: 3280M
+  compatible: 19.14.0
+oracle_osbws_chunk_size: 104857600
+emctl_agent: /u01/app/oracle/oem13c_agent/agent_inst/bin/emctl
+# Buckets
+db_backup_s3_bucket_name: "{{ simple_environment_name }}-oracle-db-backups"
+dependencies_bucket:
+  name: mod-platform-image-artefact-bucket20230203091453221500000001
+  arn: arn:aws:s3:::mod-platform-image-artefact-bucket20230203091453221500000001
+# Only used for dupicating databases from source during migration using the oracle-db-duplicate role
+# Eventually these will be removed once the RMAN catalog database has been migrated across
+catalog_tns: "(DESCRIPTION=(LOAD_BALANCE=OFF)(FAILOVER=ON)(CONNECT_TIMEOUT=10)(RETRY_COUNT=3)(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=10.161.98.92)(PORT=1521)))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=DCAT_TAF)))"
+source_db: "DNDA"
+s3_source_bucket: "eu-west-2-dlc-dev-oracledb-backups"

ansible/group_vars/environment_name_delius_core_development_dev_delius_primarydb.yml

@@ -0,0 +1,39 @@
+---
+# From hmpps-env-configs/delius-core-dev/ansible/delius_primarydb.yml
+database_global_database: DNDA
+database_taf_service: DNDA_TAF
+database_primary_unique: DNDA
+database_primary_sid: DNDA
+delius_users:
+  dbull_ro:
+  nmcmahon_ro:
+  mrees_ro:
+  ahaslehurst_ro:
+  bbuchan_ro:
+    ash_report: true
+  bbuchan_dba:
+  rsingh_dba:
+  dreid_dba:
+  sgandalwar_dba:
+  kmoss_dba:
+  worr_sro:
+oracle_software:
+  version: 19.18
+  combo_patch: p34773504_190000_Linux-x86-64.zip
+  opatch:
+    version: 12.2.0.1.36
+    filename: p6880880_190000_Linux-x86-64.12.2.0.1.36.zip
+audited_interaction_repo: TSTNDA
+database_locked_statistics:
+  - schema_name: DELIUS_APP_SCHEMA
+    table_names:
+      - DOC_MIGRATION_QUEUE_TAB: ALL
+required_patches:
+  p35012866:
+    patch_files:
+      - target_version: "19.18"
+        filename: p35012866_1918000DBRU_Linux-x86-64.zip
+    description: "BUG_33527739_APPLY.SQL GOT ORA-13516: AWR OPERATION FAILED: CATPROC NOT VALID"
+    grid_patch: false
+    database_patch: true
+    datapatch_required: true