Skip to content
This repository has been archived by the owner on Feb 24, 2022. It is now read-only.

[don't merge til after load test] Update Smarty creds & add production secrets #176

Merged
merged 8 commits into from
Jan 15, 2022

Conversation

hartsick
Copy link
Contributor

@hartsick hartsick commented Jan 15, 2022

  • Rotates all Smarty credentials to use my high-volume account
  • Removes unused Smarty embedded key from credentials file
  • Sets secret license to what is needed for our new plan (leaves autocomplete same, doesn't need to change)
  • Creates new production credentials file with all new credentials (including Smarty, for at-work encryption, Rails secret. Keeps New Relic key the same). Right now I have the key locally; should figure out who needs and how best to store.

I just sketched in some configured host names for the Smarty embedded keys (linking issue #93). The production embedded key isn't yet saved anywhere within the app. Can easily change/update the host names:
Screen Shot 2022-01-15 at 11 17 50 AM

Switches US Street license (autocomplete license stays the same) and
rotates credentials to use new ones for staging/development environment.
* Creates new encrypted file to use in production environments
* Creates new values for each of the keys in the dev/staging credentials
  logs
* Updates README to specify where to look for prod key once we launch
  prod environment, and intentions about how to name it
@rahearn
Copy link
Collaborator

rahearn commented Jan 15, 2022

not code blocking, but the production embedded key should be for covidtest.usa.gov

@@ -121,13 +121,13 @@ See [cloud.gov docs](https://cloud.gov/docs/services/relational-database/) for i

First time only: create DB service with `cf create-service aws-rds micro-psql test_at_home-rds-stage`

`cf push --strategy rolling --vars-file config/deployment/stage.yml --var rails_master_key=$(cat config/master.key)`
`cf push --strategy rolling --vars-file config/deployment/stage.yml --var rails_master_key=$(cat config/credentials/production.key)`
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[laugh] oh, I should probably have updated this section when I added the CI deploys

@rahearn rahearn merged commit 1d29a8d into main Jan 15, 2022
@rahearn rahearn deleted the ch/update-smarty-creds branch January 15, 2022 21:09
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants