search

tl-its-umich-edu / remote-office-hours-queue

Virtual queuing tool supporting Zoom video conferencing and/or in person meetings.
https://officehours.it.umich.edu/
Apache License 2.0
12 stars 28 forks source link

add new secret `ONE_TRUST_SCRIPT_DOMAIN` #523

Open lsloan opened 4 months ago

lsloan commented 4 months ago

Make a new environment variable available to the application, ONE_TRUST_SCRIPT_DOMAIN.

It requires two small changes:

  1. In service/base/kustomization.yaml, add the line…

    secret/ONE_TRUST_SCRIPT_DOMAIN

    This change needs to be committed to this GitHub repo.

  2. Then create the file service/base/secret/ONE_TRUST_SCRIPT_DOMAIN which contains a single line, the value for the key…

    03e0096b-3569-4b70-8a31-918e55aa20da

    The file was put in that location based on the premise that the same value would be used in all environments, prod, test, and dev. If instead the environments will have unique values for this key, it can be added to the directories for each one.

    This change needs to be committed to the secret archives in Dropbox.

When running the Kustomize process as shown in README.md, it produces a long output containing the base64-encoded secrets and other resources. The value was found and decoded to verify it was correct.

Using the full command to apply the output to ROSA, the ROSA web UI was used to find the secret, see its value, and confirmed it is correct.

As noted above, the two changes described above need to be committed in two places. The first step must be committed to the GitHub repo. The second step must be saved in an updated secrets file in Dropbox.

jonespm commented 4 months ago

As I noted in the PR, we also need to add back in the code that makes use of this value. We can cherry-pick it out of a78f282d56c8d468bbf2692f4f583f5032e5c9cd or re-do it.