Skip to content

BC-7793-ionos-mongodb#5191

Merged
YannickEvers merged 20 commits intomainfrom
BC-7793-ionos-mongodb
Sep 19, 2024
Merged

BC-7793-ionos-mongodb#5191
YannickEvers merged 20 commits intomainfrom
BC-7793-ionos-mongodb

Conversation

@YannickEvers
Copy link
Copy Markdown
Contributor

@YannickEvers YannickEvers commented Aug 19, 2024

Description

Part of the migration to IONOS MongoDB.
Implements a branch specific Secret (DB name in connection String is different for each namespace) via ExternalSecrets for:

  • common-cartridge-secret
  • admin-api-server-secret
  • admin-api-client-secret
  • amqp-files-secret
  • api-secret
  • tldraw-server-secret
  • moin-schule-sync-secret

Disable bypassDocumentValidation in the seeding (bypassing would require admin permissions for the IONOS MongoDB that we don't want to add).

Should be merged before it's counterpart in dof_app_deploy (changes are inactive until enabled there).

Links to Tickets or other pull requests

hpi-schul-cloud/dof_app_deploy#938
OPS-6706
BC-7793

Changes

Datasecurity

Deployment

New Repos, NPM pakages or vendor scripts

Approval for review

  • DEV: If api was changed - generate-client:server was executed in vue frontend and changes were tested and put in a PR with the same branch name.
  • QA: In addition to review, the code has been manually tested (if manual testing is possible)
  • All points were discussed with the ticket creator, support-team or product owner. The code upholds all quality guidelines from the PR-template.

Notice: Please remove the WIP label if the PR is ready to review, otherwise nobody will review it.

@YannickEvers YannickEvers requested review from a team, Loki-Afro and mamutmk5 August 23, 2024 09:55
@YannickEvers YannickEvers marked this pull request as ready for review August 23, 2024 09:56
Comment thread ansible/roles/common-cartridge/tasks/main.yml Outdated
Comment thread ansible/roles/common-cartridge/defaults/main.yml
Comment on lines +16 to +19
state: "{{ 'present' if
WITH_BRANCH_MONGO_DB_MANAGEMENT is defined and WITH_BRANCH_MONGO_DB_MANAGEMENT|bool and
WITH_COMMON_CARTRIDGE is defined and WITH_COMMON_CARTRIDGE|bool
else 'absent'}}"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Intressting that his works, is your intenntion right to place the condition for WITH_COMMON_CARTRIDGE there?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It think so. Only if common cartridge is enabled we need the External Secret for it otherwise it can be removed. Do you see a problem there that I am overlooking?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It was only the differenc where WITH_COMMON_CARTRIDGE is defined and WITH_COMMON_CARTRIDGE|bool is place what me wonder.

Comment thread ansible/roles/common-cartridge/tasks/main.yml
@sonarqubecloud
Copy link
Copy Markdown

@YannickEvers YannickEvers merged commit c643c8c into main Sep 19, 2024
@YannickEvers YannickEvers deleted the BC-7793-ionos-mongodb branch September 19, 2024 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants