Promote SSL Cert

[alismx]

DEVOPS PULL REQUEST

Related Issue

• Reverts this: Update missed cert id #7092

Changes Proposed

• This reverts the cert hardcoding and will allow us to dynamically pick up the new cert as it's been installed and tested on pentest and dev1.

Additional Information

• You're awesome.
• Deploying this as soon as I'm online and it has approvals
• If things break (they shouldn't), the reversion plan is to create a new version with the old cert.

Testing

• Please check the SSL certs for https://origin-dev.simplereport.gov and https://pentest.simplereport.gov.
  • The cert should be verified by Entrust
  • The cert should be for *.simplereport.gov
  • The cert should expire in December of 2024
  • The cert should also have a leaf and root cert, Entrust Certification Authority - L1K and Entrust Root Certification Authority - G2, both of which expire in 2030.
• Our Terraform plan for all environments (minus dev1 and pentest) should update app gateways in place to use the new cert.

Checklist for Primary Reviewer

Infrastructure

• Consult the results of the terraform-plan job inside the "Terraform Checks" workflow run for this PR. Confirm that there are no unexpected changes!

Security

• Changes with security implications have been approved by a security engineer (changes to authentication, encryption, handling of PII, etc.)
• Any dependencies introduced have been vetted and discussed

Cloud

• Oncall has been notified if this change is going in after-hours
• If there are changes that cannot be tested locally, this has been deployed to our Azure test, dev, or pentest environment for verification

Documentation

• Any changes to the startup configuration have been documented in the README

[sonarcloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[emyl3]

LGTM! Verified on the two envs you linked!