Merge branch 'azure_msi' into dev

# Conflicts:
#	track/templates/en/index.html

requirements.txt

@@ -9,3 +9,5 @@ click==6.7
 Babel==2.6.0
 Flask-Caching==1.4.0
 pymongo==3.7.0
+azure-keyvault==1.1.0
+msrestazure==0.5.1

setup.py

@@ -29,6 +29,8 @@
         'click==6.7',
         'Babel==2.6.0',
         'Flask-Caching==1.4.0',
+        'azure-keyvault==1.1.0',
+        'msrestazure==0.5.1'
     ],
     extras_require={
         'development': [

track/config.py

@@ -1,6 +1,9 @@
 import os
 import random
 
+from azure.keyvault import KeyVaultClient
+from msrestazure.azure_active_directory import MSIAuthentication, ServicePrincipalCredentials
+
 
 class Config:
     DEBUG = False
@@ -14,8 +17,19 @@ def init_app(app):
 
 
 A_DAY = 60 * 60 * 24
+
+
 class ProductionConfig(Config):
-    MONGO_URI = os.environ.get("TRACKER_MONGO_URI", None)
+    if os.environ.get("TRACKER_KEYVAULT_URI", None) is not None and os.environ.get("SECRET_NAME_RO", None) is not None:
+        KV_URI = os.environ.get("TRACKER_KEYVAULT_URI")
+        SECRET_NAME = os.environ.get("SECRET_NAME_RO")
+        creds = MSIAuthentication(resource='https://vault.azure.net')
+        keyvault = KeyVaultClient(creds)
+        MONGO_URI = keyvault.get_secret(KV_URI, SECRET_NAME, "").value
+
+    else:
+        MONGO_URI = os.environ.get("TRACKER_MONGO_URI", None)
+
     CACHE_TYPE = "filesystem"
     CACHE_DIR = os.environ.get("TRACKER_CACHE_DIR", "./.cache")
     CACHE_DEFAULT_TIMEOUT = int(os.environ.get("TRACKER_CACHE_TIMEOUT", A_DAY))

track/templates/en/index.html

@@ -36,6 +36,7 @@ <h3 class="font-bold text-xl sm:text-2xl">Domains that <br> enforce HTTPS</h3>
 </section>
 
 
+
 <script src="/static/js/https/donuts.js?{{ now() | date("%Y%m%j%H%M%S") }}"></script>
 <script src="/static/js/https/organizations.js?{{ now() | date("%Y%m%j%H%M%S") }}"></script>
 {% endblock %}