Skip to content

RUM-11897: Add scripts to set/get Vault secrets & Migrate CI#2974

Merged
ambushwork merged 1 commit into
developfrom
yl/add-vaults-secrets-defs
Dec 19, 2025
Merged

RUM-11897: Add scripts to set/get Vault secrets & Migrate CI#2974
ambushwork merged 1 commit into
developfrom
yl/add-vaults-secrets-defs

Conversation

@ambushwork

Copy link
Copy Markdown
Member

What does this PR do?

A brief description of the change being made with this pull request.

Motivation

What inspired you to submit this pull request?

Additional Notes

Anything else we should know when reviewing?

Review checklist (to be filled by reviewers)

  • Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
  • Make sure you discussed the feature or bugfix with the maintaining team in an Issue
  • Make sure each commit and the PR mention the Issue number (cf the CONTRIBUTING doc)

@ambushwork
ambushwork force-pushed the yl/add-vaults-secrets-defs branch 7 times, most recently from 5e9a81e to 5bde49e Compare November 3, 2025 20:32
@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Nov 3, 2025

Copy link
Copy Markdown

🎯 Code Coverage
Patch Coverage: 100.00%
Overall Coverage: 66.25% (-0.11%)

View detailed report

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: ffe66af | Docs | Datadog PR Page | Was this helpful? Give us feedback!

@codecov-commenter

codecov-commenter commented Nov 3, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.20%. Comparing base (eebab6b) to head (ffe66af).
⚠️ Report is 31 commits behind head on develop.

Additional details and impacted files
@@             Coverage Diff             @@
##           develop    #2974      +/-   ##
===========================================
- Coverage    71.22%   71.20%   -0.02%     
===========================================
  Files          876      876              
  Lines        32118    32118              
  Branches      5429     5429              
===========================================
- Hits         22874    22869       -5     
- Misses        7699     7705       +6     
+ Partials      1545     1544       -1     

see 40 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@ambushwork
ambushwork force-pushed the yl/add-vaults-secrets-defs branch 17 times, most recently from c83a82e to b166c1b Compare November 10, 2025 15:03
@ambushwork
ambushwork force-pushed the yl/add-vaults-secrets-defs branch 3 times, most recently from bc86c66 to 85c6bfd Compare November 18, 2025 09:41
@ambushwork ambushwork changed the title Migrate secrets from aws ssm to vault RUM-11897: Add scripts to set/get Vault secrets & Migrate CI Nov 18, 2025
@ambushwork
ambushwork marked this pull request as ready for review November 18, 2025 09:42
@ambushwork
ambushwork requested review from a team as code owners November 18, 2025 09:42
Comment thread ci/pipelines/default-pipeline.yml Outdated
Comment thread ci/pipelines/default-pipeline.yml Outdated
@ambushwork
ambushwork force-pushed the yl/add-vaults-secrets-defs branch from 85c6bfd to c5bbb97 Compare December 18, 2025 16:53
@ambushwork

ambushwork commented Dec 18, 2025

Copy link
Copy Markdown
Member Author

Updated the PR, main changes:

  • Now all the secrets are stored at path kv/+/k8s/gitlab-runner/dd-sdk-android for k8s gitlab-runners, path for macOS runners are no longer used.
  • K8s gitlab-runners don't require vault login or setting VAULT_ADDR, so login process is removed for CI
  • Every job retrieve its own key on demand, no artifacts are created for secrets

@ambushwork
ambushwork requested a review from 0xnm December 18, 2025 16:58
Comment thread ci/scripts/fetch-secrets.sh Outdated
Comment thread ci/scripts/list-secrets.sh Outdated
Comment thread ci/scripts/vault_config.sh Outdated
Comment thread ci/scripts/get-secret.sh
@ambushwork
ambushwork force-pushed the yl/add-vaults-secrets-defs branch from c5bbb97 to ffe66af Compare December 18, 2025 17:34

@0xnm 0xnm left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

probably worth having another pair of eyes, since it is security-related

@ambushwork
ambushwork merged commit 3e289ad into develop Dec 19, 2025
26 checks passed
@ambushwork
ambushwork deleted the yl/add-vaults-secrets-defs branch December 19, 2025 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants