Add script to copy/anonymize the production database onto staging

[maurizi]

Overview

This adds an interactive script meant to be run on the staging bastion, which automates the process of restoring a production database snapshot, anonymizing it, creating a dump, and restoring that dump on top of staging.

Connects #1813

Demo

Notes

I ran this from the bastion.

To run it, I first had to manually install git and python3: sudo yum install git python37. Then I clone open-apparel-registry and checked out this branch and ran ./tools/copy_production_db_to_staging.

For testing purposes, I used a copy of the staging database I spun up from a recent snapshot.

Testing Instructions

• SSH to the staging bastion
• cd into open-apparel-registry/ and ensure the latest version of this branch is checked out.
• Run ./tools/copy_production_db_to_staging. You will be asked to supply staging/production database passwords, as well as confirm data determined using the AWS CLI (I substituted the staging database copy for the staging database endpoint determined by the script).
• At each step, confirm results expected for that step of the script in the AWS console or using psql on either the temporary RDS database or the database you will be copying onto (staging by default)

Checklist

• fixup! commits have been squashed
• CI passes after rebase
• CHANGELOG.md updated with summary of features or fixes, following Keep a Changelog guidelines
• This PR is targeted at the correct branch (develop vs. ogr/develop)
• If this PR applies to both OAR and OGR a companion PR has been created

[maurizi]

@jwalgran do we have the actual list we want here? Or do we not want to list the default like with the password fields?

[jwalgran]

There are 3 API partners who's accounts we want to preserve but we do not want to name them here in the open source repo.

[jwalgran]

This worked delightfully well. Nice job.

I ran a successful test of this after one typo fixup. I made some other small recommendations that don't need another full round of review.

[jwalgran]

There are 3 API partners who's accounts we want to preserve but we do not want to name them here in the open source repo.