Add new sites to use the Injected Header/Footer: ptsd.va.gov; mirecc.va.gov; mentalhealth.va.gov

[laflannery]

Description

The VCL modal on the TeamSite header for these sites is not currently working, so it was requested by Josh Tuscher (VAHELP-8452) that 3 sites be added to use the injected header/footer.

Production url:

• https://ptsd.va.gov/
• https://www.mirecc.va.gov/
• https://mentalhealth.va.gov/

Please handle both www and non-www versions of the URL.

Tasks

Public Websites team will need to:

• add the domain with both www and non-www to the proxy-rewrite-whitelist.json allow list, with "cookieOnly": true for staging testing. - .5hr

• add the domain to Devops code that handles the TeamSite CORS allowed origins for bucket-prod-va-gov-assets and bucket-preview-va-gov-assets. The buckets are now part of the vets-api module, so you just need to make sure any needed origins are in the local allowed_origins list: https://github.com/department-of-veterans-affairs/devops/blob/master/terraform/environments/dsva-vagov-prod/main.tf#L274 - .5hr

• PR shepherding - .5-1hr

2-2.5hrs

Additional context

DEPO teamsite overview - explains the mechanisms, and has notes on testing, for the implementing team. (And has an incorrect code pointer, ticketed here: department-of-veterans-affairs/va.gov-team#43364)

After PW updates allowlists, the requesting team will need to test on Staging by setting a cookie in browser, per the TeamSite docs. The main issues are styling related, where styles from the site may affect the presentation of the header/footer. Those issues can/should be fixed by updating the CSS of the site / app (rather than by modifying styles for the header / footer globally). This is the bulk of their work, and if no style issues occur, it could potentially be a no-op. Once requesting team confirms that the injected header/footer work and they're ready to publish, PW will manage a separate issue to update code to cookieOnly: false in order to permanently expose the header/footer on the site.

• Production cookie update ticket:

To test

• Load the requested URL
• Open developer tools, Console
• Type document.cookie = "proxyRewrite=true;", and hit Enter. This creates a cookie that you will then find under Application cookies in dev tools until you clear cookies.
• Refresh the page, and injected header should load.

Acceptance Criteria

• On the requested domains, when setting cookie in the console, the global header/footer are injected
• Let DM know when your changes have deployed to production, so they can notify the requesting team

[jilladams]

@chriskim2311 @randimays this popped up after planning. The issue here is that the 3 teamSite subdomains, including the PTSD site, cannot currently open the Veterans Crisis Line modal in the old header. To mitigate that, these sites want to adopt the injected header.

We haven't added new sites to the Injected Header anytime recently, so this is a new process for both of you I know, but the template has extensive details in how to go about it. This is a critical sprint priority so please grab time with me for any questions for whoever picks it up.

[randimays]

Verified the below domains are working as expected in production:

• https://ptsd.va.gov/ ✅
• https://www.ptsd.va.gov/ ✅
• https://mirecc.va.gov/ ✅
• https://www.mirecc.va.gov/ ✅
• https://mentalhealth.va.gov/ ✅
• https://www.mentalhealth.va.gov/ ✅

We can handoff to TeamSites owners to test (testing steps).

[jilladams]

Michelle is running comms with Josh Tuscher in an email chain we are not on, so I'm gonna go ahead and close this. We can reopen as needed.

[randimays]

Closing per Jill's comment above.