From a7cbf22083a48ed7e2c64271b79328774c744958 Mon Sep 17 00:00:00 2001 From: Aaron van Meerten Date: Fri, 10 May 2024 12:01:28 -0500 Subject: [PATCH] task: remove secrets from jibri nomad jobs --- scripts/deploy-nomad-jibri.sh | 4 ---- 1 file changed, 4 deletions(-) diff --git a/scripts/deploy-nomad-jibri.sh b/scripts/deploy-nomad-jibri.sh index cf88bdbf..8c103883 100755 --- a/scripts/deploy-nomad-jibri.sh +++ b/scripts/deploy-nomad-jibri.sh @@ -46,9 +46,6 @@ NOMAD_DC="$ENVIRONMENT-$ORACLE_REGION" [ -z "$ENCRYPTED_JIBRI_CREDENTIALS_FILE" ] && ENCRYPTED_JIBRI_CREDENTIALS_FILE="$LOCAL_PATH/../ansible/secrets/jibri.yml" [ -z "$ENVIRONMENT_CONFIGURATION_FILE" ] && ENVIRONMENT_CONFIGURATION_FILE="$LOCAL_PATH/../sites/$ENVIRONMENT/vars.yml" [ -z "$MAIN_CONFIGURATION_FILE" ] && MAIN_CONFIGURATION_FILE="$LOCAL_PATH/../config/vars.yml" -[ -z "$ENCRYPTED_ASAP_KEYS_FILE" ] && ENCRYPTED_ASAP_KEYS_FILE="$LOCAL_PATH/../ansible/secrets/asap-keys.yml" - -ASAP_KEY_VARIABLE="asap_key_$ENVIRONMENT_TYPE" JIBRI_XMPP_PASSWORD_VARIABLE="jibri_auth_password" JIBRI_RECORDER_PASSWORD_VARIABLE="jibri_selenium_auth_password" @@ -59,7 +56,6 @@ set -e set -o pipefail export NOMAD_VAR_jibri_xmpp_password="$(ansible-vault view $ENCRYPTED_JIBRI_CREDENTIALS_FILE --vault-password $VAULT_PASSWORD_FILE | yq eval ".${JIBRI_XMPP_PASSWORD_VARIABLE}" -)" export NOMAD_VAR_jibri_recorder_password="$(ansible-vault view $ENCRYPTED_JIBRI_CREDENTIALS_FILE --vault-password $VAULT_PASSWORD_FILE | yq eval ".${JIBRI_RECORDER_PASSWORD_VARIABLE}" -)" -export NOMAD_VAR_asap_jwt_kid="$(ansible-vault view $ENCRYPTED_ASAP_KEYS_FILE --vault-password $VAULT_PASSWORD_FILE | yq eval ".${ASAP_KEY_VARIABLE}.id" -)" set -x