Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-6470

convert jenkins-ebs-snapshot job to use credentials for aws keys

    Details

    • Type: Story
    • Status: Done
    • Resolution: Done
    • Fix Version/s: None
    • Component/s: Continuous Integration
    • Labels:
      None

      Description

      At present, this job is being templated by puppet to inject the keys in plain text which are they converted by jenkins to stored secrets if/when the job is edited and resaved via the jenkins UI. This means that the credentials may be leaked.

        Attachments

          Issue Links

            Activity

            Hide
            jhoblitt Joshua Hoblitt added a comment -

            In addition to reworking the job configuration, a more limited set of aws credentials is now in use. The policy in place only allows volumes and snapshos to be listed and new snapshots created. At present, the backup script will attempt to purge old snapshots. This is now expected to fail. A future story will be to rework snapshot purging to be external.

            Show
            jhoblitt Joshua Hoblitt added a comment - In addition to reworking the job configuration, a more limited set of aws credentials is now in use. The policy in place only allows volumes and snapshos to be listed and new snapshots created. At present, the backup script will attempt to purge old snapshots. This is now expected to fail. A future story will be to rework snapshot purging to be external.

              People

              • Assignee:
                jhoblitt Joshua Hoblitt
                Reporter:
                jhoblitt Joshua Hoblitt
                Watchers:
                Joshua Hoblitt
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Summary Panel