How to Manage the SonarQube Service Account

How to Manage the SonarQube Service Account

Previously, BFD team members were able to update the SonarQube access token when it expired, however that is no longer the case.

When the token expires, the Cloud Ops team will need to update the following SSM parameter - /bfd/mgmt/common/sensitive/service_accounts/sonar/service_account_access_key. The access token should be valid for a year.

The username and password are also stored in SSM under /bfd/mgmt/common/sensitive/service_accounts/sonar/service_account_access_key and /bfd/mgmt/common/sensitive/service_accounts/sonar/service_account_access_password respectively. We are currently not able to log in to the account, but they are stored here for reference. These should be updated if the username/password changes in the future.

Note: These values are not tracked in Terraform since we are not able to update them ourselves.