We will need to access the following API endpoint once we go live with the Adyen Checkout API updates.
https://7816c1e8e6da0afe-WikimediaFoundation-checkout-live.adyenpayments.com/checkout/v67
Somewhat relevant:
https://docs.adyen.com/development-resources/webhooks/domain-and-ip-addresses
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T277120 Epic: Adyen reintegration, Drop In Web | |||
| Duplicate | None | T287406 Adyen Checkout: add Adyen Checkout Production API endpoint to allow-list |
[frack::puppet] 63fad9a4 Add new adyen checkout APT hosts to ipset [frack::puppet::private] 11dd935 Add new adyen checkout APT hosts to iptables
While doing this, we found a bug in the logic we are using for dns_to_ipset. It has a hard limit for how long a set name can be. When using long names like these, we would overrun and cause an error:
Jul 26 19:55:01 civi1001 /usr/local/sbin/dns_to_ipset[23725]: Error adding ipset checkout-live-ap-au.adyen.com-temp: ipset v6.38: Syntax error: setname 'checkout-live-ap-au.adyen.com-temp' is longer than 31 characters
Going to look at how to address this.