Skip to content

Fix/phase2 phase3 complete - #15

Open
PrinceNwaimo wants to merge 5 commits into
alain-Sortnext:mainfrom
PrinceNwaimo:fix/phase2-phase3-complete
Open

Fix/phase2 phase3 complete#15
PrinceNwaimo wants to merge 5 commits into
alain-Sortnext:mainfrom
PrinceNwaimo:fix/phase2-phase3-complete

Conversation

@PrinceNwaimo

Copy link
Copy Markdown

No description provided.

…ure fixes- Fixed ConfigMap key mismatch for booking-api (added DB_HOST, DB_USER, DB_PASSWORD, DB_NAME)- Created missing payment-api-secrets Secret- Fixed auth-service readiness probe path (/health -> /healthz)- Built and loaded all Docker images into Minikube- Fixed booking-api Dockerfile (npm ci -> npm install)- All four services now Running and ReadyPhase 2 & Phase 3 complete.
SEC-2026-001: S3 bucket security
- Enabled block public access
- Removed public-read ACL

SEC-2026-002: Secrets Manager integration
- Created secrets.tf for AWS Secrets Manager
- Updated auth-service to use Node.js with Secrets Manager
- Added package.json and server.js for auth-service

SEC-2026-003: IAM least privilege
- Replaced Action:* wildcard with specific actions
- Implemented least-privilege policies

Phase 4 complete - All critical findings remediated
- Fix bug 1: Added DOCKER_PASSWORD secret (configure in GitHub settings)
- Fix bug 2: Replaced ECR_REGISTRY_OLD with ECR_REGISTRY
- Fix bug 3: Added lint and test jobs before build
- Fix bug 4: Fixed cluster name from nimbuscloud-prod-old to nimbuscloud-platform-cluster

Phase 5 complete - pipeline should now run green
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant