Skip to content

Replace infrastructure scripts with Vault Agent, Ansible, and Flyway - #40

Merged
Amir-Golmoradi merged 2 commits into
mainfrom
amg-impl-hashicorp-vault
Oct 30, 2026
Merged

Amir-Golmoradi merged 2 commits into
mainfrom
amg-impl-hashicorp-vault

Conversation

@Amir-Golmoradi

Copy link
Copy Markdown
Member

Replace custom Java and Python infrastructure tooling with native lifecycle management.

Docker Compose manages infrastructure dependencies, networking, application startup, and migration jobs. Vault Agent handles authentication, credential delivery, renewal, and application restarts when credentials change. Ansible manages provisioning, initialization, configuration, backup, and recovery operations. Flyway CLI runs independent migrations for Identity, Wallet, Loan, and Collateral.

Remove the root scripts/ directory and obsolete Java migration, import, and leased-datasource implementations. Application KV access now reads the Agent token file.

Retain existing volume identities, PostgreSQL 18 layout checks, verified TLS, scoped database roles, and existing versioned SQL migrations. Preserve the committed module names and business implementations.

Validation

  • 18 offline infrastructure contracts passed.
  • 5 Java token-file, TLS, and error-sanitization tests passed.
  • 21 Ansible playbook syntax checks passed.
  • Base and production-overlay Compose configurations validated.
  • All four service JARs packaged with test sources compiled; runtime tests skipped.
  • Spotless and Checkstyle validation passed.

Live integration, credential renewal and rotation, failure recovery, backup restoration, and business end-to-end testing remain required before deployment.

@Amir-Golmoradi
Amir-Golmoradi merged commit da870b1 into main Oct 30, 2026
3 of 4 checks passed
@Amir-Golmoradi
Amir-Golmoradi deleted the amg-impl-hashicorp-vault branch October 30, 2026 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant