Skip to content

WPB:18722: Remove Postgres and smtp hard coded passwords - #817

Merged
julialongtin merged 9 commits into
masterfrom
wpb-18722-hardcoded-pass
Nov 3, 2025
Merged

WPB:18722: Remove Postgres and smtp hard coded passwords#817
julialongtin merged 9 commits into
masterfrom
wpb-18722-hardcoded-pass

Conversation

@sghosh23

@sghosh23 sghosh23 commented Oct 8, 2025

Copy link
Copy Markdown
Contributor

Change type

  • Fix
  • Feature
  • Documentation
  • Security / Upgrade

Basic information

  • THIS CHANGE REQUIRES A DEPLOYMENT PACKAGE RELEASE
  • THIS CHANGE REQUIRES A WIRE-DOCS RELEASE

Testing

  • I ran/applied the changes myself, in a test environment.
  • The CI job attached to this repo will test it for me.

Tracking

  • I added a new entry in an appropriate subdirectory of changelog.d
  • I mentioned this PR in Jira, OR I mentioned the Jira ticket in this PR.
  • I mentioned this PR in one of the issues attached to one of our repositories.

Knowledge Transfer

  • An Asciinema session is attached to the Jira ticket.

Motivation

Objective

Reason

Use case

@sghosh23
sghosh23 marked this pull request as ready for review October 9, 2025 14:33
@sghosh23
sghosh23 requested review from a team and julialongtin as code owners October 9, 2025 14:33
@sghosh23

Copy link
Copy Markdown
Contributor Author

The PR has a dependent chart update: https://github.com/wireapp/helm-charts/pull/44

Comment thread bin/demo-setup.sh
echo "⚠️ Warning: PostgreSQL secret exists but password is empty"
fi
else
echo "⚠️ Warning: PostgreSQL secret 'wire-postgresql-secret' not found in namespace '${NAMESPACE}'"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no failthrough to the values in the values file?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well, I was thinking if I should use the sync-k8s-secret-to-wire-secrets.sh here instead of setting the values as a flag and adding a default value for pgPassword in the secrets.yaml.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Switched to sync script so both demo and production are aligned now

@sghosh23
sghosh23 force-pushed the wpb-18722-hardcoded-pass branch from 4736b29 to 2b0ab14 Compare October 17, 2025 13:41
@sonarqubecloud

Copy link
Copy Markdown

@julialongtin
julialongtin merged commit ce3506f into master Nov 3, 2025
12 checks passed
@julialongtin
julialongtin deleted the wpb-18722-hardcoded-pass branch November 3, 2025 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants