Vulnerability Scanner: Remove legacy auth (#1246)

* remove secrets scripts * disable username/password auth
equinor · Mar 15, 2024 · 5e17e9c · 5e17e9c
1 parent 23a6d07
commit 5e17e9c
Show file tree

Hide file tree

Showing 12 changed files with 8 additions and 580 deletions.
diff --git a/scripts/radix-zone/radix_zone_c2.env b/scripts/radix-zone/radix_zone_c2.env
@@ -179,18 +179,7 @@ RADIX_API_REQUIRE_APP_AD_GROUPS=true
 ### Radix Vulnerability Scanner Environment
 ###
 
-
-AZ_RESOURCE_GROUP_VULNERABILITY_SCAN_SQL="vulnerability-scan-$RADIX_ZONE_MIGRATE"
-KV_SECRET_VULNERABILITY_SCAN_SQL_ADMIN="radix-vulnerability-scan-db-admin"
-KV_SECRET_VULNERABILITY_SCAN_DB_WRITER="radix-vulnerability-scan-db-writer"
-KV_SECRET_VULNERABILITY_SCAN_DB_API="radix-vulnerability-scan-db-api"
-VULNERABILITY_SCAN_SQL_SERVER_NAME="sql-radix-vulnerability-scan-$RADIX_ZONE"
-VULNERABILITY_SCAN_SQL_SERVER_FQDN="$VULNERABILITY_SCAN_SQL_SERVER_NAME.database.windows.net"
-VULNERABILITY_SCAN_SQL_DATABASE_NAME=radix-vulnerability-scan
-VULNERABILITY_SCAN_SQL_ADMIN_LOGIN=radix
-VULNERABILITY_SCAN_SQL_API_USER=radix-scanner-api
-VULNERABILITY_SCAN_SQL_SCANNER_USER=radix-scanner-writer
-VULNERABILITY_SCAN_API_CONFIG="radixconfig.c2.yaml"
+VULNERABILITY_SCAN_API_CONFIG="radixconfig.${RADIX_ZONE}.yaml"
 
 #######################################################################################
 ### Radix Cost Allocation Environment

diff --git a/scripts/radix-zone/radix_zone_dev.env b/scripts/radix-zone/radix_zone_dev.env
@@ -184,17 +184,6 @@ RADIX_API_REQUIRE_APP_AD_GROUPS=true
 ### Radix Vulnerability Scanner Environment
 ###
 
-
-AZ_RESOURCE_GROUP_VULNERABILITY_SCAN_SQL="vulnerability-scan-$RADIX_ZONE"
-KV_SECRET_VULNERABILITY_SCAN_SQL_ADMIN=radix-vulnerability-scan-db-admin
-KV_SECRET_VULNERABILITY_SCAN_DB_WRITER="radix-vulnerability-scan-db-writer"
-KV_SECRET_VULNERABILITY_SCAN_DB_API="radix-vulnerability-scan-db-api"
-VULNERABILITY_SCAN_SQL_SERVER_NAME="sql-radix-vulnerability-scan-$RADIX_ZONE"
-VULNERABILITY_SCAN_SQL_SERVER_FQDN="$VULNERABILITY_SCAN_SQL_SERVER_NAME.database.windows.net"
-VULNERABILITY_SCAN_SQL_DATABASE_NAME=radix-vulnerability-scan
-VULNERABILITY_SCAN_SQL_ADMIN_LOGIN=radix
-VULNERABILITY_SCAN_SQL_API_USER=radix-scanner-api
-VULNERABILITY_SCAN_SQL_SCANNER_USER=radix-scanner-writer
 VULNERABILITY_SCAN_API_CONFIG="radixconfig.${RADIX_ZONE}.yaml"
 
 #######################################################################################

diff --git a/scripts/radix-zone/radix_zone_playground.env b/scripts/radix-zone/radix_zone_playground.env
@@ -181,16 +181,6 @@ RADIX_API_REQUIRE_APP_AD_GROUPS=false
 ### Radix Vulnerability Scanner Environment
 ###
 
-AZ_RESOURCE_GROUP_VULNERABILITY_SCAN_SQL="vulnerability-scan-$RADIX_ZONE"
-KV_SECRET_VULNERABILITY_SCAN_SQL_ADMIN="radix-vulnerability-scan-db-admin-$RADIX_ZONE"
-KV_SECRET_VULNERABILITY_SCAN_DB_WRITER="radix-vulnerability-scan-db-writer"
-KV_SECRET_VULNERABILITY_SCAN_DB_API="radix-vulnerability-scan-db-api"
-VULNERABILITY_SCAN_SQL_SERVER_NAME="sql-radix-vulnerability-scan-$RADIX_ZONE"
-VULNERABILITY_SCAN_SQL_SERVER_FQDN="$VULNERABILITY_SCAN_SQL_SERVER_NAME.database.windows.net"
-VULNERABILITY_SCAN_SQL_DATABASE_NAME=radix-vulnerability-scan
-VULNERABILITY_SCAN_SQL_ADMIN_LOGIN=radix
-VULNERABILITY_SCAN_SQL_API_USER=radix-scanner-api
-VULNERABILITY_SCAN_SQL_SCANNER_USER=radix-scanner-writer
 VULNERABILITY_SCAN_API_CONFIG="radixconfig.${RADIX_ZONE}.yaml"
 
 #######################################################################################

diff --git a/scripts/radix-zone/radix_zone_prod.env b/scripts/radix-zone/radix_zone_prod.env
@@ -185,17 +185,7 @@ RADIX_API_REQUIRE_APP_AD_GROUPS=true
 ### Radix Vulnerability Scanner Environment
 ###
 
-AZ_RESOURCE_GROUP_VULNERABILITY_SCAN_SQL="vulnerability-scan-platform"
-KV_SECRET_VULNERABILITY_SCAN_SQL_ADMIN="radix-vulnerability-scan-db-admin"
-KV_SECRET_VULNERABILITY_SCAN_DB_WRITER="radix-vulnerability-scan-db-writer"
-KV_SECRET_VULNERABILITY_SCAN_DB_API="radix-vulnerability-scan-db-api"
-VULNERABILITY_SCAN_SQL_SERVER_NAME="sql-radix-vulnerability-scan-platform"
-VULNERABILITY_SCAN_SQL_SERVER_FQDN="$VULNERABILITY_SCAN_SQL_SERVER_NAME.database.windows.net"
-VULNERABILITY_SCAN_SQL_DATABASE_NAME=radix-vulnerability-scan
-VULNERABILITY_SCAN_SQL_ADMIN_LOGIN=radix
-VULNERABILITY_SCAN_SQL_API_USER=radix-scanner-api
-VULNERABILITY_SCAN_SQL_SCANNER_USER=radix-scanner-writer
-VULNERABILITY_SCAN_API_CONFIG="radixconfig.platform.yaml"
+VULNERABILITY_SCAN_API_CONFIG="radixconfig.${RADIX_ZONE_MIGRATE}.yaml"
 
 #######################################################################################
 ### Radix Cost Allocation Environment

diff --git a/scripts/rotate-secrets/services/vulnerability-scan-reader.sh b/scripts/rotate-secrets/services/vulnerability-scan-reader.sh