Merge branch 'stages/rc-2024-11-14' into 'stages/prod'

Deploy RC 78 to Production See merge request lg/identity-pki!46
18F · Nov 14, 2024 · 81e4484 · 81e4484
2 parents 8da34bf + 44f8774
commit 81e4484
Show file tree

Hide file tree

Showing 15 changed files with 136 additions and 690 deletions.
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
@@ -348,7 +348,8 @@ stop-review-app:
   script:
     - export CONTEXT=$(kubectl config get-contexts | grep reviewapp | awk '{print $1}' | head -1)
     - kubectl config use-context "$CONTEXT"
-    - kubectl delete application $CI_ENVIRONMENT_SLUG -n argocd
+    - kubectl delete application "$CI_ENVIRONMENT_SLUG" -n argocd
+    - kubectl delete application "$CI_ENVIRONMENT_SLUG-db" -n argocd
   stage: review
   image:
     name: dtzar/helm-kubectl:latest

diff --git a/config/cert_bundles/ficam_bundle.pem b/config/cert_bundles/ficam_bundle.pem
@@ -4279,6 +4279,50 @@ fDZIGbrgt758W9NBeLAkmZ+Py5d9l3ZhdBYS232elu8EGtkFL7YUs8rIBZuhuGI7
 yYHNcZzghmCLKQGplBqNRrEZQCQQ0BhRVqyLJ1XXGOoiPkjPQ39TPXbco/ZTUxfa
 HXF7bbYqvhDaKSZjUbYT8/BFi4xBjn7WsAeHpDLaCIxTww71hQ+RFQ==
 -----END CERTIFICATE-----
+Subject: /C=US/O=IdenTrust/OU=IdenTrust Global Common/CN=IGC CA 2
+Issuer: /C=US/O=IdenTrust/CN=IdenTrust Global Common Root CA 1
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
 Subject: /C=US/O=IdenTrust/OU=IdenTrust Global Common/CN=IGC Device CA 1
 Issuer: /C=US/O=IdenTrust/CN=IdenTrust Global Common Root CA 1
 -----BEGIN CERTIFICATE-----

diff --git a/config/cert_bundles/login_bundle.pem b/config/cert_bundles/login_bundle.pem
diff --git a/...naged Services NFI Root CA 1730643144.pem → ...=Entrust Managed Services NFI Root CA.pem b/...naged Services NFI Root CA 1730643144.pem → ...=Entrust Managed Services NFI Root CA.pem
@@ -1,10 +1,10 @@
 Subject: /C=US/O=Entrust/OU=Certification Authorities/OU=Entrust Managed Services NFI Root CA
 Issuer: /C=US/O=U.S. Government/OU=FPKI/CN=Federal Bridge CA G4
 -----BEGIN CERTIFICATE-----
-MIIG5DCCBcygAwIBAgIUEhXZ0mT0ut2FShKo5CPz6FbxkqkwDQYJKoZIhvcNAQEL
+MIIG5DCCBcygAwIBAgIUF0feSbimcB3+AwLZdZfj1N3agLswDQYJKoZIhvcNAQEL
 BQAwVTELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD1UuUy4gR292ZXJubWVudDENMAsG
-A1UECxMERlBLSTEdMBsGA1UEAxMURmVkZXJhbCBCcmlkZ2UgQ0EgRzQwHhcNMjEx
-MTAzMTMxMjI0WhcNMjQxMTAzMTQxMjI0WjByMQswCQYDVQQGEwJVUzEQMA4GA1UE
+A1UECxMERlBLSTEdMBsGA1UEAxMURmVkZXJhbCBCcmlkZ2UgQ0EgRzQwHhcNMjQw
+OTExMTQwMzIxWhcNMjcwOTExMTQwMzIxWjByMQswCQYDVQQGEwJVUzEQMA4GA1UE
 ChMHRW50cnVzdDEiMCAGA1UECxMZQ2VydGlmaWNhdGlvbiBBdXRob3JpdGllczEt
 MCsGA1UECxMkRW50cnVzdCBNYW5hZ2VkIFNlcnZpY2VzIE5GSSBSb290IENBMIIB
 IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fyw54a+2cBXtH06x4HB6ECX
@@ -32,10 +32,10 @@ SXNzdWVkQnlORklSb290Q0EucDdjMBIGA1UdJAEB/wQIMAaAAQCBAQAwDQYDVR02
 AQH/BAMCAQAwUQYIKwYBBQUHAQEERTBDMEEGCCsGAQUFBzAChjVodHRwOi8vcmVw
 by5mcGtpLmdvdi9icmlkZ2UvY2FDZXJ0c0lzc3VlZFRvZmJjYWc0LnA3YzA3BgNV
 HR8EMDAuMCygKqAohiZodHRwOi8vcmVwby5mcGtpLmdvdi9icmlkZ2UvZmJjYWc0
-LmNybDANBgkqhkiG9w0BAQsFAAOCAQEAI3igDIk79XF1stYBc7LrWffCyOP6/Wjr
-H0GJSFKWRVnxOt0qMYtqMf19PxuUoXTXUpg13A8j9C1ONSaC9oRgDxQd+hZR8gt5
-EoKXnRu95K94W7ABTdBPZDZ609g2eJ9a1ha0BYO3dd+k87cboMqw8KqEgdFm4lKt
-fDZIGbrgt758W9NBeLAkmZ+Py5d9l3ZhdBYS232elu8EGtkFL7YUs8rIBZuhuGI7
-yYHNcZzghmCLKQGplBqNRrEZQCQQ0BhRVqyLJ1XXGOoiPkjPQ39TPXbco/ZTUxfa
-HXF7bbYqvhDaKSZjUbYT8/BFi4xBjn7WsAeHpDLaCIxTww71hQ+RFQ==
+LmNybDANBgkqhkiG9w0BAQsFAAOCAQEAxudod5vh4t6anL7bWHGdqCeA8SHCXxDM
+KEy9htRbzc6Ob8izGKOXLFivpWAodpWaxAItIxEX7UTqwgetCoCW1fmqb5bGuPjF
+9vgBhz1jCesNgpvpco/vL0V8m1Fdsd/oP/h15rU8+2XeZAVugYSg+RoM64+hFVkE
+mnB3ChRYQM69fTw/NbhppYluuC1CDLwdLTekz9H34yGrjdQWMHLeVK/9+52G1mIp
+VofC86WWrHBZ3+Z3Mv50zXECi9nb3+Ffb5Dnyth23MARmCanoomh1fGgPrfL8eYo
+UG8Rpo1BLe0cPVmBIh7wqcD1Cmy2MWZsZ0ZGYgfxWMaet1awiIIeaQ==
 -----END CERTIFICATE-----
diff --git a/config/certs/C=US, O=Symantec Corporation, CN=Symantec SSP Intermediate CA - G4.pem b/config/certs/C=US, O=Symantec Corporation, CN=Symantec SSP Intermediate CA - G4.pem
diff --git a/...C=US, O=U.S. Government, OU=Department of Commerce, CN=Bureau of the Census Agency CA.pem b/...C=US, O=U.S. Government, OU=Department of Commerce, CN=Bureau of the Census Agency CA.pem
diff --git a/...ment, OU=U.S. Department of Education, CN=U.S. Department of Education Agency CA - G4.pem b/...ment, OU=U.S. Department of Education, CN=U.S. Department of Education Agency CA - G4.pem
diff --git a/...ment, OU=U.S. Department of Education, CN=U.S. Department of Education Device CA - G4.pem b/...ment, OU=U.S. Department of Education, CN=U.S. Department of Education Device CA - G4.pem
diff --git a/..., O=U.S. Government, OU=U.S. Department of Energy, CN=Naval Reactors SSP Agency CA G3.pem b/..., O=U.S. Government, OU=U.S. Department of Energy, CN=Naval Reactors SSP Agency CA G3.pem
diff --git a/..., O=U.S. Government, OU=U.S. Department of Energy, CN=Naval Reactors SSP Device CA G3.pem b/..., O=U.S. Government, OU=U.S. Department of Energy, CN=Naval Reactors SSP Device CA G3.pem
diff --git a/...=U.S. Department of Transportation, CN=U.S. Department of Transportation Agency CA G4.pem b/...=U.S. Department of Transportation, CN=U.S. Department of Transportation Agency CA G4.pem