Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rotating travis secrets part 1 and 2 #7521

Merged
merged 3 commits into from
Oct 27, 2021
Merged

Rotating travis secrets part 1 and 2 #7521

merged 3 commits into from
Oct 27, 2021

Conversation

lbergelson
Copy link
Member

This replaces a secret that requires a pr to fix, and updates the name of one of the others.
Requires 1 more step after this.

  • Switch travis variable name from DOCKER_SERVICE_PASS -> DOCKER_SERVICE_TOKEN for clarity
  • Replace gcloud encrypted key

Copy link
Collaborator

@droazen droazen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lbergelson One quick question for you

@@ -3,7 +3,7 @@
# This is expected to be run from the travis root directory.

export BOTO_CONFIG=/dev/null; # see for more information https://github.com/broadinstitute/gatk/pull/3350
openssl aes-256-cbc -K $encrypted_703d76169d63_key -iv $encrypted_703d76169d63_iv -in resources_for_CI/servicekey.json.enc -out servicekey.json -d;
openssl aes-256-cbc -K $encrypted_c51214b7dd65_key -iv $encrypted_c51214b7dd65_iv -in resources_for_CI/servicekey.json.enc -out servicekey.json -d
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the semicolon at the end of this line really no longer needed?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good question...

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't know but it seems like it should be... hopefully adding it doesn't break everything.

Copy link
Collaborator

@droazen droazen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Merge when tests pass @lbergelson

@droazen droazen mentioned this pull request Oct 26, 2021
@lbergelson lbergelson changed the title Rotating travis secrets part 1 Rotating travis secrets part 1 and 2 Oct 26, 2021
* Switch travis variable name from DOCKER_SERVICE_PASS -> DOCKER_SERVICE_TOKEN for clarity
* Replace gcloud encrypted key
* Adding a new deploy key for travis to use when authenticating to github
* The previous one was deactivated somehow already
@lbergelson
Copy link
Member Author

@droazen any new typos here?

@lbergelson lbergelson merged commit 8230258 into master Oct 27, 2021
@lbergelson lbergelson deleted the lb_revoking_keys branch October 27, 2021 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants