julialawrence
julialawrence
Using a different approach from the environments: one OIDC provider in modernisation platform account with the same permissions as the main ci user which will assume roles in core accounts....
Additionally, as part of this work, got the opportunity to test an OIDC usecase for providing limited access to only one account and a different repo: Relevant PRs: https://github.com/ministryofjustice/modernisation-platform/pull/2391 And...
@seanprivett Maybe something like this in the mod-platform-update channel?: Update of Member Workflow Files for OIDC and improved user experience :robot_face: Hi everyone, the Mod Platform team will be upgrading...
OIDC PRs now approved and merged: https://github.com/ministryofjustice/modernisation-platform-environments/pull/949 https://github.com/ministryofjustice/modernisation-platform-environments/pull/950 https://github.com/ministryofjustice/modernisation-platform-environments/pull/952 https://github.com/ministryofjustice/modernisation-platform-environments/pull/953 https://github.com/ministryofjustice/modernisation-platform-environments/pull/954 https://github.com/ministryofjustice/modernisation-platform-environments/pull/955 https://github.com/ministryofjustice/modernisation-platform-environments/pull/956 https://github.com/ministryofjustice/modernisation-platform-environments/pull/957 https://github.com/ministryofjustice/modernisation-platform-environments/pull/958 https://github.com/ministryofjustice/modernisation-platform-environments/pull/959 https://github.com/ministryofjustice/modernisation-platform-environments/pull/960 https://github.com/ministryofjustice/modernisation-platform-environments/pull/963 https://github.com/ministryofjustice/modernisation-platform-environments/pull/964 Updates to template files so new accounts get new versions of...
https://github.com/ministryofjustice/modernisation-platform-environments/pull/975 A quick fix to allow the workflow to run with OIDC. More rework to follow in the next sprint.
https://github.com/ministryofjustice/modernisation-platform-environments/actions/runs/3259403389/jobs/5352197460 Redeploy after Nuke succeeded.
Thanks to Dave E, all accounts are now enrolled in Security Hub in the Paris region. The above PR closes the loop on the MP side, with new providers and...
Completed!