1059503 - please deploy fxa-oauth train-20 to production

Status: RESOLVED FIXED

(Cloud Services :: Operations: Deployment Requests - DEPRECATED, task)

Description

[John Morrison [:jrgm]]

I have (previously) built an rpm for fxa-oauth-server train-20 (0.20.0) d99c542e435c929a02addef10ee63987ada70f31 and tested in stage with 123done and FMD automation. 

Please build new production stacks with this rpm fxa-oauth-server-svcops-0.20.0-1.x86_64.rpm. 

Along with this release, we need to add a new canGrant column, and rehash all the secrets to work with the new code.

:ckolos has the order or steps to be performed that we worked out and will add that here.

Comment 1

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

!) Add column to fxa_oauth db, client table:
ALTER TABLE fxa_oauth.clients ADD COLUMN canGrant BOOLEAN DEFAULT FALSE;

2) Spin new stack for oauth, train 20

3) remove all entries in fxa_oauth client table

4) restart server spun in step 2

5) swap DNS records in R53 to point to new oauth server

Comment 2

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

Step 1 complete

+-------------+--------------+------+-----+-------------------+-------+
| Field       | Type         | Null | Key | Default           | Extra |
+-------------+--------------+------+-----+-------------------+-------+
| id          | binary(8)    | NO   | PRI | NULL              |       |
| secret      | binary(32)   | NO   |     | NULL              |       |
| name        | varchar(256) | NO   |     | NULL              |       |
| imageUri    | varchar(256) | NO   |     | NULL              |       |
| redirectUri | varchar(256) | NO   |     | NULL              |       |
| whitelisted | tinyint(1)   | YES  |     | 0                 |       |
| createdAt   | timestamp    | NO   |     | CURRENT_TIMESTAMP |       |
| canGrant    | tinyint(1)   | YES  |     | 0                 |       |
+-------------+--------------+------+-----+-------------------+-------+

Comment 3

[John Morrison [:jrgm]]

marking this as completed in moving to 0.20.0

$ curl https://oauth.accounts.firefox.com/
{
  "version": "0.20.0",
  "commit": "d99c542e435c929a02addef10ee63987ada70f31"
}