Secrets leak fix (do not merge) #400

dfberry · 2023-11-07T22:05:20Z

Fixes #386: by moving off v3 to v4 for api - used git mv instead of mv

Fixes #350

remove 3 secrets from Azure Function environment so they don't show up in log,
remove 3 seconds from infra output,
Add 3 secrets with correct names to Key Vault from infra
read Key Vault in ./secrets for db restore, wrapper bash script to read kv and restore db
don't need to do anything for API code because it was already reading Key Vault as part of config

With this PR, both blog and portal work again when deployed.

Co-authored-by: Glaucia Lemos <[email protected]>

dfberry added 4 commits November 7, 2023 17:19

fix(infra): read key vault secrets and put in infra

a1fef37

fix(api): archive v3, make v4 the default

276c2be

fix(infra): key vault fixes

aa3377e

fix(db): restore fix w/kv password

ca086e2

dfberry requested review from anfibiacreativa, manekinekko and sinedied as code owners November 7, 2023 22:05

dfberry added 2 commits November 7, 2023 22:32

fix(api): Move api-v3 out of packages directory

2bf2141

fix(api): api-v3 has to leave packages

349d2b7

dfberry changed the title ~~Secrets leak fix~~ Secrets leak fix (Review but do not merge) Nov 7, 2023

dfberry and others added 9 commits November 8, 2023 18:33

fix(api): api in local spins up

5900a4e

fix(api): wip

2f9d3c0

Co-authored-by: Glaucia Lemos <[email protected]>

fix(api): organize api names for azure portal

9982f81

fix(api): move api to legacy

504b5a9

fix(infra): remove secrets from appsettings

886356b

fix(infra): package list for legacy

2a895c7

fix(api): package list

f1bd06f

fix(infra): restore db from key vault secret

fcf3b3d

Delete old.env.local

a222502

dfberry changed the title ~~Secrets leak fix (Review but do not merge)~~ Secrets leak fix (do not merge) Nov 10, 2023

dfberry added 2 commits November 10, 2023 15:39

fix(infra): revert to core files

2cf9a56

fix(infra): move secrets mgmt to app folder

291a15f

dfberry closed this Nov 12, 2023

Provide feedback