Katebygrace/snowflake expire jobs secretsmanager #1762
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
katebygrace
changed the title
katebygrace
force-pushed
the
katebygrace/snowflake-jobs-secretsmanager
branch
from
4fdb208
to
82f3ade
Compare
HassanJaveed84
approved these changes
May 10, 2024
JIRA:CLOUDSEC-12
katebygrace
force-pushed
the
katebygrace/snowflake-jobs-secretsmanager
branch
from
82f3ade
to
3a01db1
Compare
brimcfadden
approved these changes
May 17, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Remove calls to other secrets manager scripts in jenkins
Remove calls to secrets manager scripts in shell script
Check and remove the key_path and passphrase_path
Run python script x2
Change calls to python script to include key_file and passphrase_file (note slashes)
rm files
Review vars in analytics secure if there are any others that need to be set
job-configs/SNOWFLAKE_EXPIRE_PASSWORDS_JOB_EXTRA_VARS.yaml
The following two variables are paths to the clone of analytics-secure in a Jenkins workspace, relative to where the expire_user_passwords script is being invoked.
KEY_PATH: '$WORKSPACE/analytics-secure/snowflake/rsa_key_snowflake_task_automation_user.p8'
PASSPHRASE_PATH: '$WORKSPACE/analytics-secure/snowflake/rsa_key_passphrase_snowflake_task_automation_user'
USER: 'SNOWFLAKE_TASK_AUTOMATION_USER'
ACCOUNT: 'edx.us-east-1'
job executes on the 3rd of every 3rd month.
JOB_FREQUENCY: "H H 3 */3 *"
SECURE_BRANCH: 'origin/master'