mirror of
https://github.com/Sea-Haven-Industries/afterhours-shift-manager.git
synced 2026-09-30 09:03:11 +00:00
26adb8e6c0
* feat(api): collapse Slack, portal, and jobs onto Fargate (PLAT-216) Move HTTP and scheduled work onto one always-on Flask task so after-hours loses Lambda cold start without changing the Cognito or roster contracts. * fix(portal-api): keep CORS headers on unexpected 500s Portal SPA error handling needs Access-Control-Allow-Origin even when DynamoDB or other internals fail, otherwise the browser hides the 500. * fix(api): retarget holidays per account and ship App Home changelog (PLAT-216) * fix(iam): list ECS tasks and fail closed on non-prod Paychex (PLAT-216) * fix(portal-api): serve portal JSON with an explicit JSON content type
14 lines
561 B
HCL
14 lines
561 B
HCL
# ACM certificate for ALB HTTPS. Lookup only; do not mint. The issued wildcard
|
|
# already exists in the account (portal pattern).
|
|
#
|
|
# Bootstrap order if the listener is ever rebuilt from nothing:
|
|
# 1. Confirm an ISSUED certificate for local.acm_wildcard_domain exists.
|
|
# 2. Set attach_custom_domain=true and apply. Until the lookup finds ISSUED,
|
|
# the plan fails closed.
|
|
|
|
data "aws_acm_certificate" "wildcard" {
|
|
count = var.attach_custom_domain ? 1 : 0
|
|
domain = local.acm_wildcard_domain
|
|
statuses = ["ISSUED"]
|
|
most_recent = true
|
|
}
|