Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ATO- 1063 basic auth secret #916

Merged
merged 5 commits into from
Sep 25, 2024
Merged

Conversation

Ryan-Andrews99
Copy link
Contributor

@Ryan-Andrews99 Ryan-Andrews99 commented Sep 24, 2024

Changes

Added for new features:

  • Derives basic auth credentials from environment variables when generating static content
  • These are stored in secrets manager and pulled in at deploy time in the task definition
  • Removes any hardcoded values from the tests and pulls these in from ssm when the test container is ran

Changed for changes in existing functionality

Deprecated for soon-to-be removed features

Removed for now removed features:

  • Removes basic auth credentials from hardcoded content and tests

Fixed for any bug fixes

Security in case of vulnerabilities

Notes:

Two secrets needs to be manually created in each environment before this is deployed

We're moving these from static content to environment variables,
so this passes the values into the render options and derives them
from the environment variables.
This removes the basic auth creds from the static content and
moves them to be derived from the render options passed in from
server side
Retrieves the environment variables from secrets manager and
passes them to the task definition, so that they are available
server side when generating static content
@Ryan-Andrews99 Ryan-Andrews99 force-pushed the ATO-1063-basic-auth-secret branch from ae0d923 to 543b695 Compare September 25, 2024 11:16
@Ryan-Andrews99 Ryan-Andrews99 added this pull request to the merge queue Sep 25, 2024
Merged via the queue into main with commit 20fcbda Sep 25, 2024
16 checks passed
@Ryan-Andrews99 Ryan-Andrews99 deleted the ATO-1063-basic-auth-secret branch September 25, 2024 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants