Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Allow update of PGPSecret and PrivateKey #20

Merged
merged 9 commits into from
Dec 27, 2018

Conversation

RomainMuller
Copy link
Contributor

Updated the python code that backs the custom resource implementations for the
PGPSecret and PrivateKey constructs so they allow updating the KMS encryption
keys used by AWS SecretsManager without necessarily re-generating new secrets.

Also, added a resourceVersion has to the properties so the resource handler is
called again if the implementation code changed.

BREAKING CHANGE: this also changes the API of the PGPSecret and
CodeSigningCertificate constructs to offer a consistent API for accessing the name
and ARNs of the secret and parameters associated with the secrets, through the
ICredentialPair interface.

Updated the python code that backs the custom resource implementations for the
PGPSecret and PrivateKey constructs so they allow updating the KMS encryption
keys used by AWS SecretsManager without necessarily re-generating new secrets.

Also, added a `resourceVersion` has to the properties so the resource handler is
called again if the implementation code changed.

BREAKING CHANGE: this also changes the API of the PGPSecret and
CodeSigningCertificate constructs to offer a consistent API for accessing the name
and ARNs of the secret and parameters associated with the secrets, through the
`ICredentialPair` interface.
@RomainMuller RomainMuller requested a review from a team as a code owner December 18, 2018 13:42
Copy link
Contributor

@eladb eladb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am concerned we don't have unit tests for any of the custom resources. Any chance we can cook something up real quick? Especially due to the fact that those are security-related...

lib/code-signing/code-signing-certificate.ts Show resolved Hide resolved
lib/code-signing/private-key.ts Show resolved Hide resolved
lib/credential-pair.ts Outdated Show resolved Hide resolved
lib/pgp-secret.ts Show resolved Hide resolved
lib/util.ts Show resolved Hide resolved
build-custom-resource-handlers.sh Show resolved Hide resolved
custom-resource-handlers/src/_cloud-formation.ts Outdated Show resolved Hide resolved
custom-resource-handlers/src/_exec.ts Show resolved Hide resolved
custom-resource-handlers/src/_exec.ts Show resolved Hide resolved
custom-resource-handlers/src/_lambda.ts Show resolved Hide resolved
custom-resource-handlers/src/_rmrf.ts Outdated Show resolved Hide resolved
build-custom-resource-handlers.sh Show resolved Hide resolved
test/custom-resource-handlers/_rmrf.test.ts Outdated Show resolved Hide resolved
custom-resource-handlers/src/_rmrf.ts Show resolved Hide resolved
test/custom-resource-handlers/private-key.test.ts Outdated Show resolved Hide resolved
@RomainMuller RomainMuller merged commit bfc6225 into master Dec 27, 2018
@RomainMuller RomainMuller deleted the rmuller/allow-updating-secrets-cmk branch December 27, 2018 13:25
@justnance justnance added feature-request A feature should be added or improved. and removed enhancement labels Apr 19, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request A feature should be added or improved.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants