renew svc-bie-kafka prod certificate

department-of-veterans-affairs / abd-vro

To get Veterans benefits in minutes, VRO software uses health evidence data to help fast track disability claims.

Other

19 stars 6 forks source link

renew svc-bie-kafka prod certificate #3069

Closed chengjie8 closed 3 months ago

chengjie8 commented 3 months ago

As a result of this https://lighthouseva.slack.com/archives/C04U8GESRT7/p1717424465109949, he BIE team issued a new production certificate for us to use and will expire the existing one.

AC:

Prod keystore is generated and updated in prod environment
Deploy the svc-bie-kafka code to production (the current production image is outdated and has been deleted from the repository, so restarting the pod will not work)

chengjie8 commented 3 months ago

Since we already have the RBAC changes deployed in prod, and given the delay in BIE's RBAC production rollout, I suggest we wait for BIE to push their RBAC changes to their prod environment (which should happen within the next week or so) instead of spending time trying to find a previous commit to create a new signed Docker image from, we can then verify our changes once BIE's updates are live. Therefore, I have notified the BIE team to expire previous certificate and abandon this ticket.