Skip to content

Commit

Permalink
Set correct email address for ORCA DLQ subscription
Browse files Browse the repository at this point in the history
  • Loading branch information
chuckwondo committed Oct 19, 2023
1 parent 11ced88 commit f4c3ada
Show file tree
Hide file tree
Showing 3 changed files with 20 additions and 25 deletions.
41 changes: 19 additions & 22 deletions app/stacks/cumulus/ssm_parameters.tf
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,25 @@ data "aws_ssm_parameter" "csdap_client_password" {
name = "/shared/cumulus/csdap-client-password"
}

# ORCA Bucket Access
#
# Currently, the buckets must be setup in the Disaster Recovery (DR) AWS
# accounts. There are only DR AWS accounts for CBA UAT and CBA PROD.
#
# Unfortunately, this parameter must be refreshed every time these keys expire.
# To refresh, do the following:
#
# 1. Make new long-term access keys
# 2. For each environment, run the following
#
# DOTENV=<.env file for UAT or Prod> make bash
# aws ssm put-parameter --name ACCESS_NAME --overwrite --value NEW_ACCESS_KEY
# aws ssm put-parameter --name SECRET_NAME --overwrite --value NEW_SECRET_KEY
#
# where ACCESS_NAME and SECRET_NAME are the `name` values in the respective
# SSM parameters below, and NEW_ACCESS_KEY and NEW_SECRET_KEY are the new
# values, respectively.

data "aws_ssm_parameter" "orca_s3_access_key" {
name = "/shared/cumulus/orca/dr/s3-access-key"
}
Expand Down Expand Up @@ -92,28 +111,6 @@ data "aws_ssm_parameter" "metrics_aws_account_id" {
name = "/shared/cumulus/metrics-aws-account-id"
}

# ORCA Bucket Access - Note: As of now, the Buckets must be setup on the DR AWS accounts
# There are only DR AWS accounts for CBA UAT and CBA PROD
#
# Unfortunately, This parameter must be refreshed everytime these keys expire.
# To refresh, do the following
# (1) Make new keys
# (2) For each environment, run the following commands
# (2a) make bash
# (2b) aws ssm put-parameter --type SecureString --name NAME --overwrite --value VALUE
#
# Note, for setting the FIRST time, the command is slightly different (no --overwrite)
# # aws ssm put-parameter --type SecureString --name NAME --value VALUE
# TODO - add some of the above stuff to the proper documentation

#data "aws_ssm_parameter" "orca_s3_access_key" {
# name = "/shared/cumulus/orca/dr/s3-access-key"
#}

#data "aws_ssm_parameter" "orca_s3_secret_key" {
# name = "/shared/cumulus/orca/dr/s3-secret-key"
#}

# <% end %>

#-------------------------------------------------------------------------------
Expand Down
2 changes: 1 addition & 1 deletion app/stacks/cumulus/tfvars/base.tfvars
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
#<% depends_on("rds-cluster") %>

cmr_environment = "UAT"
orca_dlq_subscription_email = "[email protected]"
orca_dlq_subscription_email = "[email protected]"

system_bucket = "<%= bucket('internal') %>"

Expand Down
2 changes: 0 additions & 2 deletions app/stacks/cumulus/tfvars/prod.tfvars
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,6 @@ cumulus_distribution_url = "https://data.csdap.earthdata.nasa.gov/"
cumulus_distribution_url = "https://data.csda.earthdata.nasa.gov/"
# <% end %>

#orca_dlq_subscription_email = ""

metrics_es_host = "https://d23fzndssjmbvi.cloudfront.net/"

# <% if in_cba? then %>
Expand Down

0 comments on commit f4c3ada

Please sign in to comment.