Closes PLAT-3508 & PLAT-3509
Test Plan:
- Verify the key rotate correctly (set current to past, future
to current, and the new key to future) in both cases: when there
is no existing key AND when there is key already in Consul
- Verify the script will be running every month
- Verify the keys got rotated using Imperium gem version '0.4.0'
Change-Id: I630f230b3cd1c515ebb266b532901b4260622173
Reviewed-on: https://gerrit.instructure.com/154529
Reviewed-by: Stewie aka Nicholas Stewart <nstewart@instructure.com>
QA-Review: Nathan Mills <nathanm@instructure.com>
Product-Review: Nathan Mills <nathanm@instructure.com>
Tested-by: Jenkins
* disable counter cache detection (we don't use it everywhere, because it can
be a db resource drain)
* mark objects created via spec factories that bypass AR as newly-created,
and thus not needing to have associations preloaded on them
Change-Id: Ifc39c87df753fb28f8b094d77a5afe4f90fe8809
Reviewed-on: https://gerrit.instructure.com/156646
Reviewed-by: Simon Williams <simon@instructure.com>
Tested-by: Jenkins
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>
so that we don't get annoying warnings about assuming it's a string
Change-Id: I14e5741725247fb4937cda0a5e39366fb2086f12
Reviewed-on: https://gerrit.instructure.com/156609
Reviewed-by: Simon Williams <simon@instructure.com>
Tested-by: Jenkins
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>
test plan:
* everything except for the calendar (for now)
should be translated
closes #CORE-1555
Change-Id: Ia13d7961e56dbe8eb618a208185a58ef0d2125cf
Reviewed-on: https://gerrit.instructure.com/155809
Reviewed-by: Brent Burgoyne <bburgoyne@instructure.com>
QA-Review: Rohan Cheeniyil <rcheeniyil@instructure.com>
Tested-by: Jenkins
Product-Review: James Williams <jamesw@instructure.com>
also include a rake task to "lock" other keys in the future.
refs CORE-1557
test plan:
- sanity check date inputs/formats in other locales
Change-Id: I10557ab71012219540b722032ae46950595d2266
Reviewed-on: https://gerrit.instructure.com/155936
Reviewed-by: Cody Cutrer <cody@instructure.com>
Tested-by: Jenkins
Product-Review: Brent Burgoyne <bburgoyne@instructure.com>
QA-Review: Brent Burgoyne <bburgoyne@instructure.com>
Change-Id: Ib41cc4ecdbe269909484efa3dbcea6ee4f56bd08
Reviewed-on: https://gerrit.instructure.com/155260
Tested-by: Jenkins
Reviewed-by: Cody Cutrer <cody@instructure.com>
Product-Review: James Williams <jamesw@instructure.com>
QA-Review: James Williams <jamesw@instructure.com>
refs CORE-1505
also, don't build the overview report anymore (which requires summing up
all of the parts)
Change-Id: Icb4c317e65237cb4ea9a800d7742f36ebac79022
Reviewed-on: https://gerrit.instructure.com/154342
Tested-by: Jenkins
Reviewed-by: James Williams <jamesw@instructure.com>
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>
For development and open source signing we need to expose a
well-known endpoint that is served via canvas. This endpoint
pulls from consul and extracts the public key for each of
the past, present, and future keynames and puts them into
a JWK set.
closes PLAT-3507
Test Plan:
- Run canvas (either locally or with docker) and go to
/api/lti/security/jwks
- A JWK set should be returned
Change-Id: Ia8430240d18ee468796078a37f0e28a9c1b024ca
Reviewed-on: https://gerrit.instructure.com/154203
Reviewed-by: Weston Dransfield <wdransfield@instructure.com>
QA-Review: Weston Dransfield <wdransfield@instructure.com>
Tested-by: Jenkins
Product-Review: Marc Alan Phillips <mphillips@instructure.com>
Transifreq