Secrets list

List

This page details the list of secrets that the SPAR apps uses on the front-end and back-end.

Although some of the values aren't strictly secrets but rather usernames, it is still a good practice to obscure the information.

Secrets	Description	Used for	Rotation?
AWS_ACCESS_KEY_ID	Specifies an AWS access key associated with an IAM account.	Fluentbit	N
AWS_ACCESS_KEY_SECRET	Specifies the secret key associated with the access key. This is essentially the "password" for the access key.	Fluentbit	Y
AWS_KINESIS_ROLE_ARN	Specifies the IAM role ARN that should be assumed when interacting with Amazon Kinesis services	Fluentbit	N
AWS_KINESIS_STREAM	Specifies the name or ARN of an Amazon Kinesis data stream	Fluentbit	N
CYPRESS_USERNAME	The test BCeID account username	Front-end	N
CYPRESS_PASSWORD	The test BCeID account password	Front-end	Y
ORACLE_PASSWORD	Password to access the Oracle DB	Back-end (Oracle)	Y
FORESTCLIENTAPI_KEY	API key used for the Forest Client API	Back-end	Y
OC_TOKEN	The token for accessing OpenShift	CI/CD	Y
SONAR_BACKEND	The token for SonarCloud report on back-end	CI/CD	Y
SONAR_FRONTEND	The token for SonarCloud report on front-end	CI/CD	Y
SONAR_ORACLE_API	The token for SonarCloud report on Oracle API	CI/CD	Y

Access secrets value

1. Head over to the Vault, get more info here.
2. Login
   • In the namespace, type in platform-services
   • Select OIDC as the method
   • then put b9d53b as your role
3. Once logged in, select b9d53b-prod/ under the Secret Engines
4. In there you'll find GitHub-Actions-Secrets
5. 🤫