node 18 and secrets in the manager

Author: gmbronco

.platform/confighooks/prebuild/env-secret.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+secrets=$(aws secretsmanager get-secret-value --secret-id api-secrets --region $AWS_REGION | jq -r '.SecretString')
+
+IFS=$'\n' read -r -d '' -a keys <<< "$(echo $secrets | jq -r 'keys[]')"
+
+touch .env
+chown webapp:webapp .env
+for key in "${keys[@]}"; do
+  value=$(echo $secrets | jq -r ".\"$key\"")
+  printf "%s=%s\n" "$key" "$value"
+done > .env

.platform/confighooks/predeploy/env-secret.sh

@@ -0,0 +1,20 @@
+#!/bin/sh
+# In case we merge two env secrets into a flattened one in the same region
+# secrets=$(aws secretsmanager get-secret-value --secret-id api-secrets --region $AWS_REGION | jq -r '.SecretString')
+
+# IFS=$'\n' read -r -d '' -a key_value_pairs <<< "$(echo $secrets | jq -r --arg prefix "$PREFIX" 'to_entries[] | select((.key | ascii_upcase) | startswith(($prefix+"_") | ascii_upcase)) | ((.key | sub(($prefix+"_"); ""; "i")) + "=" + .value)')"
+
+# for pair in "${key_value_pairs[@]}"; do
+#   echo "$pair"
+# done
+
+secrets=$(aws secretsmanager get-secret-value --secret-id api-secrets --region $AWS_REGION | jq -r '.SecretString')
+
+IFS=$'\n' read -r -d '' -a keys <<< "$(echo $secrets | jq -r 'keys[]')"
+
+touch /var/app/staging/.env
+chown webapp:webapp /var/app/staging/.env
+for key in "${keys[@]}"; do
+  value=$(echo $secrets | jq -r ".\"$key\"")
+  printf "%s=%s\n" "$key" "$value"
+done >> /var/app/staging/.env

.platform/hooks/prebuild/env-secret.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+secrets=$(aws secretsmanager get-secret-value --secret-id api-secrets --region $AWS_REGION | jq -r '.SecretString')
+
+IFS=$'\n' read -r -d '' -a keys <<< "$(echo $secrets | jq -r 'keys[]')"
+
+touch .env
+chown webapp:webapp .env
+for key in "${keys[@]}"; do
+  value=$(echo $secrets | jq -r ".\"$key\"")
+  printf "%s=%s\n" "$key" "$value"
+done > .env

.platform/hooks/predeploy/env-secret.sh

@@ -0,0 +1,20 @@
+#!/bin/sh
+# In case we merge two env secrets into a flattened one in the same region
+# secrets=$(aws secretsmanager get-secret-value --secret-id api-secrets --region $AWS_REGION | jq -r '.SecretString')
+
+# IFS=$'\n' read -r -d '' -a key_value_pairs <<< "$(echo $secrets | jq -r --arg prefix "$PREFIX" 'to_entries[] | select((.key | ascii_upcase) | startswith(($prefix+"_") | ascii_upcase)) | ((.key | sub(($prefix+"_"); ""; "i")) + "=" + .value)')"
+
+# for pair in "${key_value_pairs[@]}"; do
+#   echo "$pair"
+# done
+
+secrets=$(aws secretsmanager get-secret-value --secret-id api-secrets --region $AWS_REGION | jq -r '.SecretString')
+
+IFS=$'\n' read -r -d '' -a keys <<< "$(echo $secrets | jq -r 'keys[]')"
+
+touch /var/app/staging/.env
+chown webapp:webapp /var/app/staging/.env
+for key in "${keys[@]}"; do
+  value=$(echo $secrets | jq -r ".\"$key\"")
+  printf "%s=%s\n" "$key" "$value"
+done >> /var/app/staging/.env

buildspec.yml

@@ -13,6 +13,8 @@ env:
         VEBALLOCKS_SUBGRAPH: 'https://api.thegraph.com/subgraphs/name/balancer-labs/balancer-gauges'
 phases:
     install:
+        runtime-versions:
+            nodejs: 18
         commands:
             - yarn install
     build:
@@ -23,6 +25,8 @@ phases:
             - yarn build
     post_build:
         commands:
+            - rm -fr node_modules
+            - yarn install --prod
             - echo Build completed on `date`
 #      - echo Pushing to graph cdn
 #      - npx graphcdn push