darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-02-04 02:11:11 -05:00
Code Issues Packages Projects Releases Wiki Activity

Pass ADMIN_CLIENT_SECRET through deploy process

Browse Source
This commit is contained in:
Ryan Ahearn
2022-09-02 11:49:51 -04:00
parent 56d9ac8e62
commit def35bf402
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
.github/workflows/deploy.yml vendored
View File

@@ -35,8 +35,9 @@ jobs:
- name: Deploy to cloud.gov - name: Deploy to cloud.gov
uses: 18f/cg-deploy-action@main uses: 18f/cg-deploy-action@main
env: env:
DANGEROUS_SALT: ${{ secrets.DANGEROUS_SALT }} DANGEROUS_SALT: ${{ secrets.PROD_DANGEROUS_SALT }}
SECRET_KEY: ${{ secrets.SECRET_KEY }} SECRET_KEY: ${{ secrets.PROD_SECRET_KEY }}
ADMIN_CLIENT_SECRET: ${{ secrets.PROD_ADMIN_CLIENT_SECRET }}
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
with: with:
@@ -44,11 +45,11 @@ jobs:
cf_password: ${{ secrets.cloudgov_password }} cf_password: ${{ secrets.cloudgov_password }}
cf_org: gsa-10x-prototyping cf_org: gsa-10x-prototyping
cf_space: 10x-notifications cf_space: 10x-notifications
full_command: | push_arguments: >-
cf push --strategy rolling \ --var DANGEROUS_SALT="$DANGEROUS_SALT"
--var DANGEROUS_SALT="$DANGEROUS_SALT" \ --var SECRET_KEY="$SECRET_KEY"
--var SECRET_KEY="$SECRET_KEY" \ --var ADMIN_CLIENT_SECRET="$ADMIN_CLIENT_SECRET"
--var AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" \ --var AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID"
--var AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" --var AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY"
bail: bail:

5
manifest.yml
View File

@@ -27,9 +27,10 @@ applications:
NOTIFICATION_QUEUE_PREFIX: prototype_10x NOTIFICATION_QUEUE_PREFIX: prototype_10x
STATSD_HOST: localhost STATSD_HOST: localhost
INTERNAL_CLIENT_API_KEYS: '{"notify-admin":["dev-notify-secret-key"]}' INTERNAL_CLIENT_API_KEYS: '{"notify-admin":["((ADMIN_CLIENT_SECRET))"]}'
# Credentials variables # Credentials variables
ADMIN_CLIENT_SECRET: ((ADMIN_CLIENT_SECRET))
DANGEROUS_SALT: ((DANGEROUS_SALT)) DANGEROUS_SALT: ((DANGEROUS_SALT))
SECRET_KEY: ((SECRET_KEY)) SECRET_KEY: ((SECRET_KEY))
AWS_REGION: us-west-2 AWS_REGION: us-west-2
@@ -37,5 +38,3 @@ applications:
AWS_US_TOLL_FREE_NUMBER: +18446120782 AWS_US_TOLL_FREE_NUMBER: +18446120782
DVLA_EMAIL_ADDRESSES: [] DVLA_EMAIL_ADDRESSES: []
NOTIFY_EMAIL_DOMAIN: dispostable.com