Please create a new 1P vault called Mobile-Deploy-CI-Test

[roryabraham]

Problem

We are working on setting up https://github.com/Expensify/App-Test-Fork for full dry-run e2e tests of the NewDot deploy cycle, with little to no permanent code diff between the fork and the upstream.

To access secrets in NewDot CI/CD, we use 1P. We want a separate test vault so that we can set up all our dummy credentials without risking accidentally using production secrets.

Solution

Please set up a new 1P vault called Mobile-Deploy-CI-Test. ring access level can match Mobile-Deploy-CI vault

[melvin-bot]

Triggered auto assignment to @robertjchen (ring0), see https://stackoverflow.com/c/expensify/questions/6102 for more details.

[robertjchen]

@roryabraham done, let me know if you can see it 👍

[roryabraham]

Nice, yes I see it thanks

[roryabraham]

@robertjchen can you please:

1. install the 1Password CLI (if needed)

2. Create a service account token that can access this vault with:

   op service-account create "Mobile-Deploy-CI-Test" --expires-in 90d --vault Mobile-Deploy-CI-Test:read_items

3. Save the token as a password in the Mobile-Deploy-CI-Test vault

4. (optional) Add the token as a repo secret called OP_SERVICE_ACCOUNT_TOKEN with in the App-Test-Fork repo with this link: https://github.com/Expensify/App-Test-Fork/settings/secrets/actions/new

Thanks! (I attempted this but got a 403 trying to create the service account)

[melvin-bot]

@robertjchen Uh oh! This issue is overdue by 2 days. Don't forget to update your issues!

[roryabraham]

bobby's OOO this week, reassigning

[melvin-bot]

Triggered auto assignment to @fukawi2 (ring0), see https://stackoverflow.com/c/expensify/questions/6102 for more details.

[coleaeason]

Looks like robert did it but didn't save it in the vault, i rolled the token and saved the new version in the vault

[roryabraham]

@coleaeason can you please go to https://github.com/Expensify/App/settings/variables/actions and add OP_VAULT=Mobile-Deploy-CI as a repo variable?

[coleaeason]

done