Page MenuHomeDevCentral

Migrate former Zemke-Rhyne secrets from a.b.c to a/b/c path
ClosedPublic

Authored by dereckson on Jan 28 2024, 19:11.
Tags
None
Referenced Files
Unknown Object (File)
Fri, May 9, 04:24
Unknown Object (File)
Thu, May 8, 20:50
Unknown Object (File)
Thu, May 8, 09:49
Unknown Object (File)
Thu, May 8, 03:45
Unknown Object (File)
Wed, May 7, 20:30
Unknown Object (File)
Wed, May 7, 17:11
Unknown Object (File)
Sun, May 4, 10:29
Unknown Object (File)
Sat, May 3, 09:52
Subscribers
None

Details

Summary

Zemke-Rhyne secrets have been migrated to Vault under ops/secrets/<old name>.

Vault offers a concept of path to organize secrets a hierarchical way,
while under Zemke-Rhyne, the name of the secret used dots.

Ref T930

Test Plan

Refresh Vault policies, deploy a service on PaaS Docker

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
credentials-migrate
Build Status
Buildable 5232
Build 5513: arc lint + arc unit

Event Timeline

This change touches Wolfplex files. As such, administrative approval is needed from Wolfplex technical contact.

In D3302#50408, @Herald wrote:

This change touches Wolfplex files. As such, administrative approval is needed from Wolfplex technical contact.

The change is only technical from Vault perspective: secrets were stored in ops/secrets/<former Zemke-Rhyne name>,
and have now been migrated to new paths using a slash ("/") as separator instead of a dot (".").

For Wolfplex files, it's indeed now needed to use ops/secrets/nasqueron/etherpad/api to get Etherpad API key.

Credentials for Wolfplex are now all located in ops/secrets/wolfplex/.

This revision is now accepted and ready to land.Jan 28 2024, 19:16

Consolidate dot and slash sections in credentials pillar.