Secrets list

List

This page details the list of secrets that the SPAR apps uses on the frontend and back-nd.

Although some of the values aren't strictly secrets but rather usernames, it is still a good practice to obscure the information.

Secrets	Description	Used for	Rotation?
CYPRESS_USERNAME	The test BCeID account username	Frontend	N
CYPRESS_PASSWORD	The test BCeID account password	Frontend	Y
ORACLE_PASSWORD	Password to access the Oracle DB	Backend (Oracle)	Y
FORESTCLIENTAPI_KEY	API key used for the Forest Client API	Backend	Y
OC_TOKEN	The token for accessing OpenShift	CI/CD	Y
SONAR_BACKEND	The token for SonarCloud report on backend	CI/CD	Y
SONAR_FRONTEND	The token for SonarCloud report on frontend	CI/CD	Y
SONAR_ORACLE_API	The token for SonarCloud report on Oracle API	CI/CD	Y

Access secrets value

1. Head over to the Vault, get more info here.
2. Login
   • In the namespace, type in platform-services
   • Select OIDC as the method
   • then put b9d53b as your role
3. Once logged in, select b9d53b-prod/ under the Secret Engines
4. In there you'll find GitHub-Actions-Secrets
5. 🤫