Page MenuHomePhabricator
Differential D9276

[terraform] Add services token secret
ClosedPublic
Actions

Authored by bartek on Sep 25 2023, 5:38 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Mar 23, 5:01 PM
Unknown Object (File)
Tue, Mar 11, 4:03 PM
Unknown Object (File)
Fri, Mar 7, 10:43 PM
Unknown Object (File)
Jan 28 2025, 7:49 PM
Unknown Object (File)
Jan 11 2025, 8:08 PM
Unknown Object (File)
Dec 29 2024, 3:18 PM
Unknown Object (File)
Dec 21 2024, 2:09 PM
Unknown Object (File)
Dec 21 2024, 2:09 PM
View All 86 Files
Subscribers
ashoat
tomek

Details

Reviewers
varun
michal
• jon
Commits
rCOMM8df72c372af7: [terraform] Add services token secret
Summary

Created AWS resource for services token, held in secrets manager. Until we have rotation done, the secret password is generated once with Terraform, except local dev where it's hardcoded.

Depends on D9275

Test Plan

Tested on localstack and staging. The secret resource is accessible both through the API (next diffs) and AWS CLI

Diff Detail

Repository
rCOMM Comm
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
services/
terraform/
dev/
20 lines
8 lines
4 lines
modules/
shared/
4 lines
21 lines
remote/
20 lines
1 line
5 lines

Diff 31592

View Options

services/terraform/dev/.terraform.lock.hcl

Show All 17 Lines
# Find AMQP-CPP installation # Find AMQP-CPP installation
find_package(amqpcpp CONFIG REQUIRED) find_package(amqpcpp CONFIG REQUIRED)
# Find Cryptopp installation # Find Cryptopp installation
pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6) pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6)
# Find Libuv installation # Find Libuv installation
pkg_check_modules(LIBUV REQUIRED libuv=1.43.0) pkg_check_modules(LIBUV REQUIRED libuv>=1.43)
set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE) set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE)
set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE) set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE)
find_package(AWSSDK REQUIRED COMPONENTS core dynamodb) find_package(AWSSDK REQUIRED COMPONENTS core dynamodb)
find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED) find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED)
find_package(OpenSSL REQUIRED) find_package(OpenSSL REQUIRED)
▲ Show 20 Lines • Show All 116 Lines • Show Last 20 Lines
View Options

services/terraform/dev/main.tf

Show All 17 Lines
# Find AMQP-CPP installation # Find AMQP-CPP installation
find_package(amqpcpp CONFIG REQUIRED) find_package(amqpcpp CONFIG REQUIRED)
# Find Cryptopp installation # Find Cryptopp installation
pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6) pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6)
# Find Libuv installation # Find Libuv installation
pkg_check_modules(LIBUV REQUIRED libuv=1.43.0) pkg_check_modules(LIBUV REQUIRED libuv>=1.43)
set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE) set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE)
set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE) set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE)
find_package(AWSSDK REQUIRED COMPONENTS core dynamodb) find_package(AWSSDK REQUIRED COMPONENTS core dynamodb)
find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED) find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED)
find_package(OpenSSL REQUIRED) find_package(OpenSSL REQUIRED)
▲ Show 20 Lines • Show All 116 Lines • Show Last 20 Lines
View Options

services/terraform/dev/providers.tf

Show All 17 Lines
# Find AMQP-CPP installation # Find AMQP-CPP installation
find_package(amqpcpp CONFIG REQUIRED) find_package(amqpcpp CONFIG REQUIRED)
# Find Cryptopp installation # Find Cryptopp installation
pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6) pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6)
# Find Libuv installation # Find Libuv installation
pkg_check_modules(LIBUV REQUIRED libuv=1.43.0) pkg_check_modules(LIBUV REQUIRED libuv>=1.43)
set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE) set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE)
set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE) set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE)
find_package(AWSSDK REQUIRED COMPONENTS core dynamodb) find_package(AWSSDK REQUIRED COMPONENTS core dynamodb)
find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED) find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED)
find_package(OpenSSL REQUIRED) find_package(OpenSSL REQUIRED)
▲ Show 20 Lines • Show All 116 Lines • Show Last 20 Lines
View Options

services/terraform/modules/shared/providers.tf

Show All 17 Lines
# Find AMQP-CPP installation # Find AMQP-CPP installation
find_package(amqpcpp CONFIG REQUIRED) find_package(amqpcpp CONFIG REQUIRED)
# Find Cryptopp installation # Find Cryptopp installation
pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6) pkg_check_modules(CRYPTOPP REQUIRED libcryptopp=8.6)
# Find Libuv installation # Find Libuv installation
pkg_check_modules(LIBUV REQUIRED libuv=1.43.0) pkg_check_modules(LIBUV REQUIRED libuv>=1.43)
set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE) set(BUILD_TESTING OFF CACHE BOOL "Turn off tests" FORCE)
set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE) set(WITH_GFLAGS OFF CACHE BOOL "Turn off gflags" FORCE)
find_package(AWSSDK REQUIRED COMPONENTS core dynamodb) find_package(AWSSDK REQUIRED COMPONENTS core dynamodb)
find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED) find_package(Boost 1.40 COMPONENTS program_options thread system REQUIRED)
find_package(OpenSSL REQUIRED) find_package(OpenSSL REQUIRED)
▲ Show 20 Lines • Show All 116 Lines • Show Last 20 Lines
View Options

services/terraform/modules/shared/secretsmanager.tf

Loading...
View Options

services/terraform/remote/.terraform.lock.hcl

Loading...
View Options

services/terraform/remote/main.tf

Loading...
View Options

services/terraform/remote/providers.tf

Loading...