Page MenuHomeDevCentral

Migrate former Zemke-Rhyne secrets from a.b.c to a/b/c path
ClosedPublic

Authored by dereckson on Jan 28 2024, 19:11.
Tags
None
Referenced Files
F7514432: D3302.diff
Sun, Apr 27, 23:29
F7509725: D3302.id8500.diff
Sun, Apr 27, 21:44
F7506612: D3302.diff
Sun, Apr 27, 20:35
Unknown Object (File)
Sat, Apr 26, 21:07
Unknown Object (File)
Sat, Apr 26, 18:22
Unknown Object (File)
Sat, Apr 26, 08:04
Unknown Object (File)
Fri, Apr 25, 06:35
Unknown Object (File)
Fri, Apr 25, 06:21
Subscribers
None

Details

Summary

Zemke-Rhyne secrets have been migrated to Vault under ops/secrets/<old name>.

Vault offers a concept of path to organize secrets a hierarchical way,
while under Zemke-Rhyne, the name of the secret used dots.

Ref T930

Test Plan

Refresh Vault policies, deploy a service on PaaS Docker

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
credentials-migrate
Build Status
Buildable 5232
Build 5513: arc lint + arc unit

Event Timeline

This change touches Wolfplex files. As such, administrative approval is needed from Wolfplex technical contact.

In D3302#50408, @Herald wrote:

This change touches Wolfplex files. As such, administrative approval is needed from Wolfplex technical contact.

The change is only technical from Vault perspective: secrets were stored in ops/secrets/<former Zemke-Rhyne name>,
and have now been migrated to new paths using a slash ("/") as separator instead of a dot (".").

For Wolfplex files, it's indeed now needed to use ops/secrets/nasqueron/etherpad/api to get Etherpad API key.

Credentials for Wolfplex are now all located in ops/secrets/wolfplex/.

This revision is now accepted and ready to land.Jan 28 2024, 19:16

Consolidate dot and slash sections in credentials pillar.