From dae26daeebf6a5d279fa52dcea2a678a58d4bbc8 Mon Sep 17 00:00:00 2001 From: = Date: Tue, 13 Aug 2024 20:39:20 +0530 Subject: [PATCH 1/2] feat: added debug points to test ssm integration in replication --- .../integration-auth/integration-sync-secret.ts | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/backend/src/services/integration-auth/integration-sync-secret.ts b/backend/src/services/integration-auth/integration-sync-secret.ts index 33f58edfb..ffd57f6cc 100644 --- a/backend/src/services/integration-auth/integration-sync-secret.ts +++ b/backend/src/services/integration-auth/integration-sync-secret.ts @@ -538,19 +538,21 @@ const syncSecretsAWSParameterStore = async ({ integration, secrets, accessId, - accessToken + accessToken, + projectId }: { integration: TIntegrations; secrets: Record; accessId: string | null; accessToken: string; + projectId?: string; }) => { let response: { isSynced: boolean; syncMessage: string } | null = null; if (!accessId) { throw new Error("AWS access ID is required"); } - + logger.info(`getIntegrationSecrets: [projectId=${projectId}] ssm debug: started`); const config = new AWS.Config({ region: integration.region as string, credentials: { @@ -594,6 +596,12 @@ const syncSecretsAWSParameterStore = async ({ nextToken = parameters.NextToken; } + logger.info( + `getIntegrationSecrets: [projectId=${projectId}] ssm debug: ${Object.keys(awsParameterStoreSecretsObj).join(",")}` + ); + logger.info( + `getIntegrationSecrets: [projectId=${projectId}] ssm infisical secrets debug: ${Object.keys(secrets).join(",")}` + ); // Identify secrets to create // don't use Promise.all() and promise map here // it will cause rate limit @@ -3678,7 +3686,8 @@ export const syncIntegrationSecrets = async ({ integration, secrets, accessId, - accessToken + accessToken, + projectId }); break; case Integrations.AWS_SECRET_MANAGER: From 8e08c443ada557d85f28fdd257203312be47294e Mon Sep 17 00:00:00 2001 From: = Date: Tue, 13 Aug 2024 20:50:19 +0530 Subject: [PATCH 2/2] feat: added log to print operation based keys --- .../src/services/integration-auth/integration-sync-secret.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/backend/src/services/integration-auth/integration-sync-secret.ts b/backend/src/services/integration-auth/integration-sync-secret.ts index ffd57f6cc..08a6e00b0 100644 --- a/backend/src/services/integration-auth/integration-sync-secret.ts +++ b/backend/src/services/integration-auth/integration-sync-secret.ts @@ -611,6 +611,7 @@ const syncSecretsAWSParameterStore = async ({ // case: secret does not exist in AWS parameter store // -> create secret if (secrets[key].value) { + logger.info(`getIntegrationSecrets: [projectId=${projectId}] ssm debug create: ${key}`); await ssm .putParameter({ Name: `${integration.path}${key}`, @@ -651,6 +652,7 @@ const syncSecretsAWSParameterStore = async ({ } // case: secret exists in AWS parameter store } else { + logger.info(`getIntegrationSecrets: [projectId=${projectId}] ssm debug update: ${key}`); // -> update secret if (awsParameterStoreSecretsObj[key].Value !== secrets[key].value) { await ssm @@ -703,6 +705,7 @@ const syncSecretsAWSParameterStore = async ({ for (const key in awsParameterStoreSecretsObj) { if (Object.hasOwn(awsParameterStoreSecretsObj, key)) { if (!(key in secrets)) { + logger.info(`getIntegrationSecrets: [projectId=${projectId}] ssm debug delete: ${key}`); // case: // -> delete secret await ssm