feat: [PAGOPA-2625] Defining FdR-Fase3 PostgreSQL infra and all related pipelines

.devops/fdr-fase3-db-migration-pipelines.yml

@@ -0,0 +1,205 @@
+pr: none
+trigger: none
+#trigger:
+#  - develop
+
+pool:
+  vmImage: 'ubuntu-latest'
+
+parameters:
+  - name: k8sEnv
+    displayName: K8s Environment
+    type: string
+    default: dev
+    values:
+      - dev
+      - it
+      - prf
+      - uat
+      - prd
+  # version of liquibase db.changelog-master-*.xml to run
+  - name: dbVersion
+    displayName: Database Version
+    type: string
+  # liquibase context to run specific changelogs,default to '_' to run only uncontexted changelogs
+  - name: lbContexts
+    displayName: Liquibase Contexts
+    type: string
+    default: '_'
+  # liquibase log level if needed finer logs
+  - name: lbLogLevel
+    displayName: Liquibase Log Level
+    type: string
+    default: INFO
+    values:
+      - INFO
+      - FINE
+      - WARNING
+      - SEVERE
+
+variables:
+  ${{ if eq(parameters.k8sEnv, 'dev') }}:
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_DEV)'
+    JDBC_URL: jdbc:postgresql://fdr-db.d.internal.postgresql.pagopa.it:5432/fdr3?sslmode=require&prepareThreshold=0
+    KEY_VAULT_NAME: pagopa-d-fdr-kv
+    poolImage: 'pagopa-dev-linux-infra'
+  ${{ if eq(parameters.k8sEnv, 'it') }}:
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_DEV)'
+    JDBC_URL: jdbc:postgresql://fdr-db.d.internal.postgresql.pagopa.it:5432/fdr3-replica?sslmode=require&prepareThreshold=0
+    KEY_VAULT_NAME: pagopa-d-fdr-kv
+    poolImage: 'pagopa-dev-linux-infra'
+  ${{ elseif eq(parameters.k8sEnv, 'prf') }}:
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_UAT)'
+    JDBC_URL: jdbc:postgresql://fdr-db.u.internal.postgresql.pagopa.it:6432/fdr3-replica?sslmode=require&prepareThreshold=0
+    KEY_VAULT_NAME: pagopa-u-fdr-kv
+    poolImage: 'pagopa-uat-linux-infra'
+  ${{ elseif eq(parameters.k8sEnv, 'uat') }}:
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_UAT)'
+    JDBC_URL: jdbc:postgresql://fdr-db.u.internal.postgresql.pagopa.it:6432/fdr3?sslmode=require&prepareThreshold=0
+    KEY_VAULT_NAME: pagopa-u-fdr-kv
+    poolImage: 'pagopa-uat-linux-infra'
+  ${{ elseif eq(parameters.k8sEnv, 'prd') }}:
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_PROD)'
+    JDBC_URL: jdbc:postgresql://fdr-db.p.internal.postgresql.pagopa.it:6432/fdr3?sslmode=require&prepareThreshold=0
+    KEY_VAULT_NAME: pagopa-p-fdr-kv
+    poolImage: 'pagopa-prod-linux-infra'
+  APPROVE_NOTIFY_GROUP: '[pagoPA-iac]\pagopa-iac-externals-team'
+  APPROVE_NOTIFY_ADMIN: '[pagoPA-iac]\Project Administrators'
+  FDR3_USERNAME: fdr3
+  FDR3_SCHEMA: fdr3
+
+stages:
+  - stage: liquibase_status
+    displayName: "Liquibase status"
+    jobs:
+      - job: liquibase_status_job
+        pool: $(poolImage)
+        displayName: "Liquibase status and validation"
+        steps:
+          - checkout: self
+          - script: |
+              cd $(Pipeline.Workspace)
+              mkdir liquibase-app
+              wget -c https://github.com/liquibase/liquibase/releases/download/v4.17.1/liquibase-4.17.1.tar.gz
+              tar -xzf liquibase-4.17.1.tar.gz -C liquibase-app
+              rm -rf liquibase-4.17.1.tar.gz
+              ls -la liquibase-app
+              echo "##vso[task.prependpath]$(Pipeline.Workspace)/liquibase-app"
+            displayName: "Install Liquibase"
+          - script: |
+              cd $(Pipeline.Workspace)
+              mkdir java
+              wget -c https://download.java.net/java/GA/jdk11/9/GPL/openjdk-11.0.2_linux-x64_bin.tar.gz
+              tar -xzf openjdk-11.0.2_linux-x64_bin.tar.gz -C java
+              rm -rf openjdk-11.0.2_linux-x64_bin.tar.gz
+              ls -la java
+              echo "##vso[task.prependpath]$(Pipeline.Workspace)/java/jdk-11.0.2/bin"
+              echo "##vso[task.setvariable variable=JAVA_HOME;]$(Pipeline.Workspace)/java/jdk-11.0.2"
+            displayName: "Install Java"
+          - task: AzureKeyVault@2
+            displayName: "Get $(KEY_VAULT_NAME) secrets"
+            inputs:
+              azureSubscription: $(AZURE_SERVICE_CONNECTION)
+              keyVaultName: $(KEY_VAULT_NAME)
+              secretsFilter: 'db-fdr3-password'
+          - script: |
+              liquibase \
+              --url="$(JDBC_URL)" \
+              --username="$(FDR3_USERNAME)" \
+              --password="$(db-fdr3-password)" \
+              --classpath=src/psql/fdr/liquibase/changelog/fdr3 \
+              --changeLogFile=db.changelog-master-${{ parameters.dbVersion }}.xml \
+              --liquibaseSchemaName="$(FDR3_SCHEMA)" \
+              --defaultSchemaName="$(FDR3_SCHEMA)" \
+              --contexts="${{ parameters.lbContexts }}" \
+              --log-level=${{ parameters.lbLogLevel }} \
+              status -Dschema=$(FDR3_SCHEMA)
+            displayName: "fdr3 db status"
+          - script: |
+              liquibase \
+              --url="$(JDBC_URL)" \
+              --username="$(FDR3_USERNAME)" \
+              --password="$(db-fdr3-password)" \
+              --classpath=src/psql/fdr/liquibase/changelog/fdr3 \
+              --changeLogFile=db.changelog-master-${{ parameters.dbVersion }}.xml \
+              --liquibaseSchemaName="$(FDR3_SCHEMA)" \
+              --defaultSchemaName="$(FDR3_SCHEMA)" \
+              --contexts="${{ parameters.lbContexts }}" \
+              --log-level=${{ parameters.lbLogLevel }} \
+              validate -Dschema=$(FDR3_SCHEMA)
+            displayName: "fdr3 db validate"
+      - job: prd_approval
+        dependsOn: liquibase_status_job
+        condition: eq('${{ parameters.k8sEnv }}', 'prd')
+        pool: server
+        displayName: "Approval"
+        timeoutInMinutes: 16
+        steps:
+          - task: ManualValidation@0
+            timeoutInMinutes: 15
+            inputs:
+              notifyUsers: |
+                $(APPROVE_NOTIFY_GROUP)
+                $(APPROVE_NOTIFY_ADMIN)
+              instructions: "Please check liquibase status and validation for each database and resume if correct"
+              onTimeout: 'reject'
+      - job: initialization
+        pool: $(poolImage)
+        dependsOn: [liquibase_status_job,prd_approval]
+        condition: or(and(eq('${{ parameters.k8sEnv }}', 'dev'),eq('${{ parameters.k8sEnv }}', 'it'),eq('${{ parameters.k8sEnv }}', 'prf'),eq('${{ parameters.k8sEnv }}', 'uat'), not(failed('liquibase_status_job'))),and(eq('${{ parameters.k8sEnv }}', 'prd'),not(failed('prd_approval'))))
+        displayName: "Update fdr DB ${{ parameters.k8sEnv }}"
+        steps:
+          - checkout: self
+            clean: true
+            persistCredentials: true
+          - script: |
+              cd $(Pipeline.Workspace)
+              mkdir liquibase-app
+              wget -c https://github.com/liquibase/liquibase/releases/download/v4.17.1/liquibase-4.17.1.tar.gz
+              tar -xzf liquibase-4.17.1.tar.gz -C liquibase-app
+              rm -rf liquibase-4.17.1.tar.gz
+              ls -la liquibase-app
+              echo "##vso[task.prependpath]$(Pipeline.Workspace)/liquibase-app"
+            displayName: "Install Liquibase"
+          - script: |
+              cd $(Pipeline.Workspace)
+              mkdir java
+              wget -c https://download.java.net/java/GA/jdk11/9/GPL/openjdk-11.0.2_linux-x64_bin.tar.gz
+              tar -xzf openjdk-11.0.2_linux-x64_bin.tar.gz -C java
+              rm -rf openjdk-11.0.2_linux-x64_bin.tar.gz
+              ls -la java
+              echo "##vso[task.prependpath]$(Pipeline.Workspace)/java/jdk-11.0.2/bin"
+              echo "##vso[task.setvariable variable=JAVA_HOME;]$(Pipeline.Workspace)/java/jdk-11.0.2"
+            displayName: "Install Java"
+          - task: AzureKeyVault@2
+            displayName: "Get $(KEY_VAULT_NAME) secrets"
+            inputs:
+              azureSubscription: $(AZURE_SERVICE_CONNECTION)
+              keyVaultName: $(KEY_VAULT_NAME)
+              secretsFilter: 'db-fdr3-password'
+          - script: |
+              liquibase \
+              --url="$(JDBC_URL)" \
+              --username="$(FDR3_USERNAME)" \
+              --password="$(db-fdr3-password)" \
+              --classpath=src/psql/fdr/liquibase/changelog/fdr3 \
+              --changeLogFile=db.changelog-master-${{ parameters.dbVersion }}.xml \
+              --liquibaseSchemaName="$(FDR3_SCHEMA)" \
+              --defaultSchemaName="$(FDR3_SCHEMA)" \
+              --contexts="${{ parameters.lbContexts }}" \
+              --log-level=${{ parameters.lbLogLevel }} \
+              update -Dschema=$(FDR3_SCHEMA)
+            displayName: "Run Liquibase fdr3"
+          - script: |
+              liquibase \
+              --url="$(JDBC_URL)" \
+              --username="$(FDR3_USERNAME)" \
+              --password="$(db-fdr3-password)" \
+              --classpath=src/psql/fdr/liquibase/changelog/fdr3 \
+              --changeLogFile=db.changelog-master-${{ parameters.dbVersion }}.xml \
+              --liquibaseSchemaName="$(FDR3_SCHEMA)" \
+              --defaultSchemaName="$(FDR3_SCHEMA)" \
+              --contexts="${{ parameters.lbContexts }}" \
+              --log-level=${{ parameters.lbLogLevel }} \
+              tag ${{ parameters.dbVersion }}
+            displayName: "Tag fdr3"

.devops/fdr-fase3-db-schema-pipelines.yml

@@ -0,0 +1,88 @@
+pr: none
+trigger: none
+#trigger:
+#  - develop
+
+pool:
+  vmImage: 'ubuntu-latest'
+
+parameters:
+  - name: k8sEnv
+    displayName: K8s Environment
+    type: string
+    default: dev
+    values:
+      - dev
+      - it
+      - prf
+      - uat
+      - prd
+
+variables:
+  ${{ if eq(parameters.k8sEnv, 'dev') }}:
+    DB_HOST: pagopa-d-weu-fdr-flexible-postgresql
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_DEV)'
+    KEY_VAULT_NAME: 'pagopa-d-fdr-kv'
+    DATABASE_NAME: fdr3
+    poolImage: 'pagopa-dev-linux-infra'
+  ${{ elseif eq(parameters.k8sEnv, 'uat') }}:
+    DB_HOST: pagopa-u-weu-fdr-flexible-postgresql
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_UAT)'
+    KEY_VAULT_NAME: 'pagopa-u-fdr-kv'
+    DATABASE_NAME: fdr3
+    poolImage: 'pagopa-uat-linux-infra'
+  ${{ elseif eq(parameters.k8sEnv, 'prd') }}:
+    DB_HOST: pagopa-p-weu-fdr-flexible-postgresql
+    AZURE_SERVICE_CONNECTION: '$(TF_AZURE_SERVICE_CONNECTION_PLAN_NAME_PROD)'
+    KEY_VAULT_NAME: 'pagopa-p-fdr-kv'
+    DATABASE_NAME: fdr3
+    poolImage: 'pagopa-prod-linux-infra'
+  ADMIN_USERNAME: azureuser
+  FDR3_USERNAME: fdr3
+  FDR3_SCHEMA: fdr3
+
+stages:
+  - stage: initialization_jobs
+    displayName: "Init ${{ parameters.k8sEnv }}"
+    jobs:
+      - job: initialization
+        pool: $(poolImage)
+        displayName: "Schemas creation job"
+        steps:
+          - task: AzureKeyVault@2
+            displayName: "Get secrets"
+            inputs:
+              azureSubscription: $(AZURE_SERVICE_CONNECTION)
+              keyVaultName: $(KEY_VAULT_NAME)
+              secretsFilter: 'db-administrator-login-password,db-fdr3-password'
+          - task: AzureCLI@2
+            displayName: "create all schemas"
+            inputs:
+              azureSubscription: $(AZURE_SERVICE_CONNECTION)
+              scriptLocation: inlineScript
+              scriptType: bash
+              inlineScript: |
+
+                create_schema () {
+                  SCHEMA=$1
+                  USER=$2
+                  PASS=$3
+                  az config set extension.use_dynamic_install=yes_without_prompt
+                  az postgres flexible-server execute --name $(DB_HOST) --admin-user $(ADMIN_USERNAME) \
+                  --admin-password '$(db-administrator-login-password)' --database-name "$(DATABASE_NAME)" \
+                  --querytext "
+                  do \$\$
+                  BEGIN
+                  IF NOT EXISTS (SELECT FROM pg_catalog.pg_roles WHERE rolname = '$USER') THEN
+                  CREATE ROLE $USER LOGIN PASSWORD '$PASS';
+                  END IF;
+
+                  GRANT ALL PRIVILEGES ON DATABASE \"$DATABASE_NAME\" TO \"$USER\";
+                  GRANT \"$USER\" to $ADMIN_USERNAME;
+                  CREATE SCHEMA IF NOT EXISTS \"$SCHEMA\" AUTHORIZATION \"$USER\";
+                  END
+                  \$\$;
+                  "
+                }
+
+                create_schema "$FDR3_SCHEMA"     "$FDR3_USERNAME"     "$(db-fdr3-password)"

src/domains/fdr-common/03_postgresql.tf

@@ -96,6 +96,15 @@ resource "azurerm_postgresql_flexible_server_database" "fdr_db" {
   charset   = "utf8"
 }
 
+
+# FdR database
+resource "azurerm_postgresql_flexible_server_database" "fdr3_db" {
+  name      = "fdr3"
+  server_id = module.postgres_flexible_server_fdr.id
+  collation = "en_US.utf8"
+  charset   = "utf8"
+}
+
 # https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-limits
 # DEV D4s_v3 / D4ds_v4	4	16 GiB	1719	1716
 # UAT D8s_v3 / D8ds_V4	8	32 GiB	3438	3435

src/domains/fdr-common/README.md

@@ -64,6 +64,7 @@
 | [azurerm_postgresql_flexible_server_configuration.fdr_db_flex_min_pool_size](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_configuration) | resource |
 | [azurerm_postgresql_flexible_server_configuration.fdr_db_flex_shared_preoload_libraries](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_configuration) | resource |
 | [azurerm_postgresql_flexible_server_configuration.fdr_db_flex_wal_level](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_configuration) | resource |
+| [azurerm_postgresql_flexible_server_database.fdr3_db](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_database) | resource |
 | [azurerm_postgresql_flexible_server_database.fdr_db](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_database) | resource |
 | [azurerm_postgresql_flexible_server_database.fdr_replica_db](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_database) | resource |
 | [azurerm_postgresql_flexible_server_virtual_endpoint.virtual_endpoint](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_virtual_endpoint) | resource |

src/domains/fdr-secret/secret/weu-dev/noedit_secret_enc.json

@@ -4,6 +4,7 @@
 	"ai-connection-string": "ENC[AES256_GCM,data:+W4Dv8HOnrPP+jNZFCs5/BoA9tWXBc2czt0OBLj0Fxv1sAh66dSB2gDe4LU37nLhmDJXpNptjuYX+IFt7bwxuRRBC1r/Nlo1jt1JAn8NHokdHgpKiFxz8DOsktXTkE78vo0aWlMOJRhwCRYdxxd+9tEJRBzh3Qkt7vMCDayLT0GIwO4g23AMbfRlQQNN3w7S7Ec7QtXLgLDNcKHHmJhkhPj/DdCWTjso2xJwki3KpLciwSO83BBjMcTcfIfALseSK8vA,iv:ez49Ux1jbP/8glj0/0oDIifvIKN8OIuJDQyxukgtOWo=,tag:ZnqCeKqIFnVooV820tPE+g==,type:str]",
 	"api-config-cache-subscription-key-string": "ENC[AES256_GCM,data:6xFFHZ4KxxA8X6xFMSpw6Y7Kpm4MbDKj8ayAbVhbFI8=,iv:uVD9eDW7rQ9pLEYx9jlef9z57k4G282kBBAtU/45AvQ=,tag:XyKhV7JOih0aG+8KDA386w==,type:str]",
 	"db-fdr-password": "ENC[AES256_GCM,data:Fn8HIPEqEmU=,iv:r1m1+n5z1DItoYnT9BuFagy7UlTvNB71NH8LaxtRAvs=,tag:Mqlre5MtNmp0NNP6JV34pQ==,type:str]",
+	"db-fdr3-password": "ENC[AES256_GCM,data:8SWt7a2BR7s=,iv:lnYKS95chCHoRO9CMgNNM290ox7aV09rND8rcOuLCSw=,tag:GkseYSXXZX4AkBOrpbhdmg==,type:str]",
 	"lightbend-key": "ENC[AES256_GCM,data:gzgOODmngRF3AEBmJ3366CyhZFoUFqQRSA5+NLR2y88kkmtapll7tPH3AxWTIf6f,iv:XzZrxSMJiZEgDmHaUNv/JT5EzkKCxDuEgniW0jVhwS0=,tag:+h1Hib8sUSVU3AOUDXUUCA==,type:str]",
 	"otel-auth-bearer": "ENC[AES256_GCM,data:BQU9CPZY8Gh31MSgb6uIWqAxsRoeDu8f7P2hkIrYdL+3W86HBmikJ36mpsxBk31U5Zk4StwgRZRBBRxAcNd1PBeO2CuTu7m9h8w4tU1vb/k1nyWFtCB0XFjDm0b7BGfxi3gWlInhvLB9qJgT+6sb,iv:IAZoO9XhxiZjmR4ln26u1Q815WjTlXFNc+i/NTEzPlQ=,tag:RGjXz24L3cXGfYhOo9RlLg==,type:str]",
 	"fdr-subscription-key-string": "ENC[AES256_GCM,data:UXMoH3B1PojqrppL2OcJ2ZikcJssUyko2sn69KBQE+Q=,iv:FWNfyGUUQbeKXx1vvMLLo3ETIEscYr3u1M54RyOpx9o=,tag:5Mp4/BqwhsRSs/c7qJBt6A==,type:str]",
@@ -32,8 +33,8 @@
 		],
 		"hc_vault": null,
 		"age": null,
-		"lastmodified": "2025-01-30T13:54:29Z",
-		"mac": "ENC[AES256_GCM,data:E0nkKY/v3V32grX8CQZlU05dlllqT2WVGnyEgt5dnsSw50nl0YDG+FjgwLotXc41wg1/idX4rD08LTjT2DncXj08xgMJLHFcjaR4V+XyqFvTTJXsWOMfwtVjutn7gMcbbuMVYsIZcKHIjuJOOtVScr83lf23CsQuQfWlkEL+AL4=,iv:fM+V4tmqi33tUmd95I+i8nMkyAJvwrfUuYqNVoNAjJQ=,tag:XLOPCYMeBwn27C63/7czGA==,type:str]",
+		"lastmodified": "2025-02-06T10:22:33Z",
+		"mac": "ENC[AES256_GCM,data:b8TB1q4OtxqvnUNtNXdaPnaAU93RfCQNpOyanaSqXXjDa/c0Hy5D4XfaDKnSUPbwjDsOuoYHRWzWQPxT7XWx5Tqvq1EZ5QdKBnNmNhQge6tMW4rbor8PTOuLqUDh/PyX5MtqwViQCBYr6CuPF8fe+xjne6e2dFztXtUmql0dlRw=,iv:meubHoMQEbbz2nCZKCAitZn6UmvJH8+B3Fq6tZUgJuI=,tag:+sMGxu0Yhe7GqN4w71RJAg==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.9.1"

src/domains/fdr-secret/secret/weu-uat/noedit_secret_enc.json

@@ -4,6 +4,7 @@
 	"ai-connection-string": "ENC[AES256_GCM,data:ihdPVzwEP1jdNE80b1U/lzxAEh/m5Wre22CtR2KRQNJe+eFkt36pjEvqyrZ/EgLyX6L7ifHXm0F1S0U1qsPvW+ezkPBOYWKxTkudnniUoG4TH2/gxNht8WRZpcq+3UKk2ri59sNWPRTNdE6om9IkNSG/2a+DiJKHe5szcty0LMUyTwAHd9odMzZ+14nI1ymlVAt9BRXG+1/F8oUknk0RzF65oUtB00ns3zu5v+kl3WLLzKSBLBh6nw88jfoJDU/ZCtd0,iv:O0pzBe4dHRXWHXmj2WcSTjwHdA4iEHgj8YDjwf5Sk2c=,tag:qp1yn1UkknbWBEb5JpOGsg==,type:str]",
 	"api-config-cache-subscription-key-string": "ENC[AES256_GCM,data:UQHPGVyAvjOZvSrKawbDTSy2qnUDWWZ7J5c8NyS01Fo=,iv:RkCD9v3vGeLGkaJkY6dr3vTcBKpYLyawA8iLePl+G/0=,tag:KjWFHcmhzWLWCyR7LpgbAA==,type:str]",
 	"db-fdr-password": "ENC[AES256_GCM,data:mAhAXUHHCZo=,iv:Xj3lKhVVp5g148J9wIiJC5mxOCtUtp0aEo/HXiaBSpc=,tag:vD4Q3ZNhlDDLe1kmm++vWg==,type:str]",
+	"db-fdr3-password": "ENC[AES256_GCM,data:B3FkvB0dNtk=,iv:bTIeB1LPTJV0pAfqzH7HwcJBNxENZnDizj+oFfA5wu4=,tag:F7ALI24s4BQZkiD6g0lmZA==,type:str]",
 	"lightbend-key": "ENC[AES256_GCM,data:PhwhJuMWcxXZURQZAEMdWJylg+5SB3GVw5NDTr899oFH0bp7xaPFqzryhc8bfGvq,iv:1e94UEID5sUagLESTgAS4jDqTuewRC+YX/UA7vE3zsQ=,tag:ZOYKNE35Cehw+F8VuLCPUw==,type:str]",
 	"otel-auth-bearer": "ENC[AES256_GCM,data:QR3yEM4nVQ+DNizmff1x5+UjDaY4vKz3Imu2g/t6qDG8361puCF8/4WumdgYJhNs0LuAOAGEHE7b9yYq10IB47KB5Uoac5SgvWiy82hkzPbj66EsMBpnu3VpRL2+9b6fMybNgdq6WCfSB37VZn3b,iv:fKEyyGHrNcFJ8EnR+G1wgSRvWcMW6bhbq838bKi/3gU=,tag:kejlnVORdXWIS4IrOag7Sg==,type:str]",
 	"fdr-subscription-key-string": "ENC[AES256_GCM,data:x1khv1tZZnt5Jzpx4id86rGkLZxkybU5Z7z++do8SHo=,iv:gBF8kEb9uX/CA9aSJ1vpjZYzM2hACjXQAFC3hvuquc8=,tag:u+a2s676sJOL57sVPjVkjw==,type:str]",
@@ -32,8 +33,8 @@
 		],
 		"hc_vault": null,
 		"age": null,
-		"lastmodified": "2025-01-30T13:56:22Z",
-		"mac": "ENC[AES256_GCM,data:6ZFCu7p3o/991dqE7dyU0/GhUq+cpe+ugHKh6HLq8x27WYYo+44xttH7DQW4W8HznLv13iscbuUifLe6ZvrTuvF0CTlK8t/0Jg6b0ygEhsldQpy6vIBPCwY2iynm6eeVbR4WVsAV76t9Zx90zNcXFww5HeHmWi8zToYi/N79/v0=,iv:d9qrQy8ZgNoWzDsWagofcp6B2tiE+E723Y/Qs3UJ41g=,tag:CpOPG3EnFdaYbZvu9K+v9g==,type:str]",
+		"lastmodified": "2025-02-06T10:23:14Z",
+		"mac": "ENC[AES256_GCM,data:wCpcPofFKkuIEpYl0BoubNyAEZRtSo6eZD8QkbwqVLrqWmqDITObyvF+VyjcGtyCi0znKzB8AJAyXlNbgPdoyajFvlGTnd8rYEHLl6h5uauV7ODBawvObZpqVSIN7MtvCezPtkIVmVnWNAvgEF+QpW2pTYEnE1JGSy1Zyk7Wytk=,iv:ycNLXk5cDtPI4ELnUkpFLD4wGsmV0QNfsu29cwr0fX8=,tag:505THP3COabdn+96IqyE5w==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.9.1"