-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Katebygrace/collect metrics secrets #1760
Conversation
0c9d5df
to
ea50b3f
Compare
@@ -10,10 +10,19 @@ source "${PYTHON_VENV}/bin/activate" | |||
cd $WORKSPACE/analytics-tools/snowflake | |||
make requirements | |||
|
|||
python3 secrets-manager.py -w -n analytics-secure/snowflake/rsa_key_snowflake_task_automation_user.p8 -v rsa_key_snowflake_task_automation_user | |||
python3 secrets-manager.py -w -n analytics-secure/snowflake/rsa_key_passphrase_snowflake_task_ automation_user -v rsa_key_passphrase_snowflake_task_automation_user |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is the underscore intentional here ?
rsa_key_passphrase_snowflake_task_
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
just one question about the secret path
JIRA:CLOUDSEC-12
ea50b3f
to
31fa59d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| o |
__| __ _|_ |
/ | / \_ | | |
\_/|_/\__/ |_/|_/o
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🥇
Remove calls to other secrets manager scripts in jenkins
Remove calls to secrets manager scripts in shell script
Check and remove the key_path and passphrase_path
Run python script x2
Change calls to python script to include key_file and passphrase_file (note slashes)
rm files
Review vars in analytics secure if there are any others that need to be set
job-configs/SNOWFLAKE_COLLECT_METRICS_JOB_EXTRA_VARS.yaml
SECURE_BRANCH: 'origin/master'