From 51b327ff4f9d0b64346320d7abdef3ba23d5a9ba Mon Sep 17 00:00:00 2001 From: Ben Langfeld Date: Tue, 25 Jul 2023 16:37:57 -0300 Subject: [PATCH] Re-encrypt secrets for new owner team The CI user which decrypts these during a build was no longer able to do so using the old owner's role because the KMS key was made accessible only via the new owner's role. Repeat of https://github.com/powerhome/playbook/pull/2589 caused by https://github.com/powerhome/software/pull/222. --- yarn.secrets.env | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/yarn.secrets.env b/yarn.secrets.env index 194b10f574..54ea4dc43c 100644 --- a/yarn.secrets.env +++ b/yarn.secrets.env @@ -1,14 +1,14 @@ -FONTAWESOME_NPM_AUTH_TOKEN=ENC[AES256_GCM,data:l/CvC9dw4L96Gw3VBFV1T9L+ipahpy16+J+/9xrLTJlXbBTS,iv:ykZbowYhyY0vR7O+cYNxkTzZZevZDkAJ8yTv2NuQuyM=,tag:iu2topLlsovpn+hALMJAQg==,type:str] +FONTAWESOME_NPM_AUTH_TOKEN=ENC[AES256_GCM,data:uGXfclFR9ywofRpEPgSyxWtMKpIORwID+ipVID7Zn9g1D6N6,iv:CA1Y0Z5VAWqCIuQFuIoIlDneHeE1Rn+R8RKbedtpfC4=,tag:q4nuLDC2LgPrRnH14JaDPw==,type:str] +sops_version=3.7.3 sops_kms__list_0__map_aws_profile= -sops_kms__list_0__map_arn=arn:aws:kms:us-east-1:205083374951:key/d46e780d-ee0a-4a7d-b049-0443e1b91d41 -sops_kms__list_0__map_created_at=2023-06-06T18:16:31Z +sops_kms__list_0__map_enc=AQICAHjD4+PGrfNOURZm5p39Rxa0oVLr81xX3U8gvQwj2QeLTgHJbuwiEumryyVrMC35DhgfAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMsfZw25YYoMW99aDtAgEQgDsTmEN+rqWJGU/0UGoMWjibt+ZoYLJaJHns4+4hazmqXni98f2fFPZxiS/DSvh1GhaqC2HIfBlonQGxtA== +sops_kms__list_1__map_role=arn:aws:iam::205083374951:role/playbook-admins +sops_mac=ENC[AES256_GCM,data:FXE9k7qwh6V63urxPcuCHLOQHj91UzHUqY/zWRcyrlNgJG868eZgWqnAuW9g50Ho1NsPp7aHjnO+cGeZhKPZmWSUnhgQvozBh1OIkdH5nar9YdSFA8s8mrdQtC4yqCgk+KKpt8dP+212EDCh1KHoP87khINGIERGOvoNVPzTb7Y=,iv:omRwHVDsPqcKtwfTJw21qWfSZOTdoRSFBi3igm7lMJs=,tag:DNowaPtVIXPgKhc4S5kaaA==,type:str] sops_unencrypted_suffix=_unencrypted -sops_kms__list_0__map_enc=AQICAHjD4+PGrfNOURZm5p39Rxa0oVLr81xX3U8gvQwj2QeLTgGYEjfxZTcWWCTrb1/Hgz7UAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMRP2dLNYTgdgOune3AgEQgDvbFpEAdn6Fd0Rj/ZGGKiZadadtRu8geRQA0BloJiV7TeF1XWki3hz0N4Ct4QzDrqbc7INUL7mXtRxnrQ== -sops_mac=ENC[AES256_GCM,data:hvtBgHXLByhJCiWWEFE6ESMXkWn05bgDd/f8lIw/QOF11y3DDNz7fMM48LuYSJLOqhr6ycQ+QZoTgYp+I3ztUSlfXWpT/zXJXy5Dg4KdvrliElZ4XVVyMT1Kw3bZqCpbyJHHGj82riy+Ut9CmdKRnJmsKwxU0ZufriaEvrtkHS0=,iv:Ej1H/S0jVjdYQC6YMJ548738a386Pt+QNw1CcI/iHLo=,tag:CiFezG7RWO4pjF69xee3gg==,type:str] -sops_version=3.7.3 -sops_lastmodified=2023-06-06T18:16:32Z +sops_kms__list_1__map_enc=AQICAHjD4+PGrfNOURZm5p39Rxa0oVLr81xX3U8gvQwj2QeLTgGac6uDpbSP8N/ckOENxQ+jAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMPqiKo+ZRZlq2ZxNJAgEQgDsQOo8XtBTEhWlBxdyJ5le7wbQnxIzbMFdEYkZqkXjvxEOZZnS4zxzw/03gtomeirqPJq2AQSANTDMrsQ== +sops_kms__list_1__map_created_at=2023-07-25T19:37:27Z +sops_lastmodified=2023-07-25T19:37:28Z sops_kms__list_1__map_arn=arn:aws:kms:us-east-1:205083374951:key/d46e780d-ee0a-4a7d-b049-0443e1b91d41 -sops_kms__list_1__map_enc=AQICAHjD4+PGrfNOURZm5p39Rxa0oVLr81xX3U8gvQwj2QeLTgEjjBgnn7nYFAVacQLSR5ieAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMKNb5br+rrTyZWKq5AgEQgDvJEQB6i/OwZrov/7CZtztpp9IwKRiphN000yIsluH18qMauQsR1ZTH4cPUcZQQiW3cwMZbGPG3X9jyWg== sops_kms__list_1__map_aws_profile= -sops_kms__list_1__map_role=arn:aws:iam::205083374951:role/playbook-web -sops_kms__list_1__map_created_at=2023-06-06T18:16:31Z +sops_kms__list_0__map_arn=arn:aws:kms:us-east-1:205083374951:key/d46e780d-ee0a-4a7d-b049-0443e1b91d41 +sops_kms__list_0__map_created_at=2023-07-25T19:37:27Z