Repository navigation
Use deployment scripts v2.0.10 - #23
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update the deployment suite from v2.0.5 to v2.0.10, verified against
e81a6772a33819c1b57c88a95d04494e59c559b8. The shared deployer now gives each image 30 minutes to scan after upload and digest verification, replacing the shared 15-minute publication/scan deadline. It logs progress and includes the last scan status in timeout errors.Remove this service's explicit 900-second scan deadline so its custom adapter uses the new per-image budget. Targets
developfor dev adoption. Existing scan completion/freshness and severity gates, branch filters, contexts and production approvals remain configured as before. No deployment is triggered by this PR's creation.This upgrade also includes the intervening suite fixes and v2.0.9's removal of offline IAM-policy generators; IAM definitions are maintained separately in v6-services-iac.
Validation: CircleCI CLI configuration validation and shell syntax checks passed; the config diff contains only tag/SHA replacements. The shared release's 111 security tests passed in its pinned AWS executor and GitHub CI. Both dev/prod manifests passed offline validation. All 15 service deployment tests passed against v2.0.10 in the pinned AWS executor. Application CI and live deployment acceptance are separate checks.
The existing one-hour STS session limit still applies across all images and rollout. This release increases scan polling budgets without extending credentials.