Repository navigation
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update the deployment suite from v2.0.5 to v2.0.9, fetched by tag and verified against
dc06de730f068a230efa9d5f4d4d9c80782d3bfb. This PR targetsdevelopfor dev validation before a separate production promotion.v2.0.9 removes the offline
policiescommand and IAM role/trust generators. Required IAM definitions remain in the private v6-services-iac repository. The restrictive STS session policy remains; application CI does not create IAM roles or policies.This also adopts the intervening shared-suite fixes, including exact immutable release-tag verification. Review the linked release history when validating the dev deployment.
Changes are limited to the suite tag, matching commit verification, and matching deployment-documentation references. Existing branch filters, contexts, production approval gates, manifests, and service-specific deployment behavior remain configured as before.
Validation: CircleCI CLI configuration validation and shell syntax checks passed. The configuration diff was checked to contain only tag/commit-pin replacements. The release's 102-test security suite passed in its pinned AWS executor. Both dev/prod manifests passed offline validation. All 15 service deployment tests passed against v2.0.9 in the pinned AWS executor. GitHub/CircleCI application checks run separately; a live dev deployment follows merge.