bcgov / digital-journeys

PSA Forms System
https://bcgov.github.io/digital-journeys/
Apache License 2.0
8 stars 7 forks source link

Devops: Get a dedicated SSL cert for Prod #490

Closed MeghanStothers closed 1 year ago

MeghanStothers commented 2 years ago

From Nick Corcoran @ CITZ reached me in teams

Hi Meghan. I just saw the announcement of the Digital Telework Agreement (Great Job) and see that you're the product owner. I would ask that you obtain a dedicated TLS (SSL) certificate for your production site, and not use the platform wildcard certificate. The wildcard cert is fine for non-prod, but all prod sites need a dedicated certificate. These can be obtained through the following process: https://developer.gov.bc.ca/BC-Government-OpenShift-DevOps-Security-Considerations#tls-certificates

request: get a dedicated TLS (SSL) certificate for production site, and not use the platform wildcard certificate.

@warrenchristian1telus : Can you advise about the urgency of this request? I'm thinking it could wait until next week, but I'd welcome your recommendation.

MeghanStothers commented 1 year ago

We'll watch for any further issues. Happy to close this one...and stay closed :) Thanks all