Page MenuHomeDevCentral

Migrate former Zemke-Rhyne secrets from a.b.c to a/b/c path
ClosedPublic

Authored by dereckson on Jan 28 2024, 19:11.
Tags
None
Referenced Files
F11709696: D3302.id8502.diff
Sat, Sep 13, 10:44
F11708668: D3302.id8500.diff
Sat, Sep 13, 06:54
F11708243: D3302.id8501.diff
Sat, Sep 13, 05:26
F11707230: D3302.id8501.diff
Sat, Sep 13, 01:48
F11706521: D3302.diff
Fri, Sep 12, 23:09
Unknown Object (File)
Fri, Sep 12, 18:34
Unknown Object (File)
Fri, Sep 12, 18:34
Unknown Object (File)
Fri, Sep 12, 18:34
Subscribers
None

Details

Summary

Zemke-Rhyne secrets have been migrated to Vault under ops/secrets/<old name>.

Vault offers a concept of path to organize secrets a hierarchical way,
while under Zemke-Rhyne, the name of the secret used dots.

Ref T930

Test Plan

Refresh Vault policies, deploy a service on PaaS Docker

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
credentials-migrate
Build Status
Buildable 5231
Build 5512: arc lint + arc unit

Event Timeline

This change touches Wolfplex files. As such, administrative approval is needed from Wolfplex technical contact.

In D3302#50408, @Herald wrote:

This change touches Wolfplex files. As such, administrative approval is needed from Wolfplex technical contact.

The change is only technical from Vault perspective: secrets were stored in ops/secrets/<former Zemke-Rhyne name>,
and have now been migrated to new paths using a slash ("/") as separator instead of a dot (".").

For Wolfplex files, it's indeed now needed to use ops/secrets/nasqueron/etherpad/api to get Etherpad API key.

Credentials for Wolfplex are now all located in ops/secrets/wolfplex/.

This revision is now accepted and ready to land.Jan 28 2024, 19:16

Consolidate dot and slash sections in credentials pillar.