Skip to content

Upgrade lockbox to v1.3.0

Tiger Watson requested to merge 423296-bump-lockbox-version into master

What does this MR do and why?

Upgrades lockbox to the latest version.

Changelog

How to set up and validate locally (Terraform state)

Requirements:

  • GDK with object storage enabled
  • Terraform CLI installed

In your GDK:

  1. Create an empty project in your GDK
  2. Clone the project locally, and add the following Terraform config in a file named main.tf:
     terraform {
       backend "http" {
       }
     }
    
     resource "local_file" "test" {
         content  = timestamp()
         filename = "${path.module}/foo/test.txt"
     }
  3. From your project sidebar in GDK, go to Operate -> Terraform states, and click "Copy terraform init command"
  4. Execute the copied command from a terminal in the project directory.
  5. Execute terraform plan and terraform apply a few times - successful operations mean the (encrypted) state file is being read and re-saved correctly.

How to set up and validate locally (Secure files)

  1. Create a new file, for example:
echo "Hello World" >> ~/Desktop/hello.txt
  1. Go to any project in your local GDK. Go to project settings, CI/CD, Secure Files. Click expand, and then click Upload File and upload the file you just created.

  2. Once that completes, pull up a rails console and run:

secure_file = Ci::SecureFile.last
secure_file.file.file.read # returns the encrypted contents of the file
Digest::SHA256.hexdigest(secure_file.file.read) == secure_file.checksum # checksums should match
secure_file.file.read # returns the decrypted contents of the file

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #423296 (closed)

Edited by Tiger Watson

Merge request reports

Loading