adam/payments-dashboard
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/payments-dashboard.git synced 2026-10-07 11:39:01 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
136 commits 1 branch 1 tag 1.9 MiB
Commit graph

3 commits

Author SHA1 Message Date
Adam Moussa
15ddb7dc74
fix(iam): trust the Lambda reusable at any pin (#126) 
* ci: pin ci-terraform to v1.0.26

That release classifies a pull request against the merge parent, so a
re-run after main moves is not treated as a mixed app and Terraform change.

* fix(iam): trust the Lambda reusable at any pin

A digest in the deploy role meant every reusable bump had to edit Terraform
before dev and prod could assume the role.
 2026-10-06 15:10:10 -04:00
Adam Moussa
30a1737345
feat(ci): deploy Lambda zips through the org reusable (PLAT-79) (#119)
Some checks failed
Deploy / Deploy to dev (push) Has been cancelled
Details
Deploy / Deploy to prod (push) Has been cancelled
Details 
* feat(ci): deploy Lambda zips through the org reusable (PLAT-79)

* fix(iam): trust only this account's deploy environment (PLAT-79)
 2026-09-28 19:41:09 +00:00
Adam Moussa
0e3e95c240
feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79) (#109)
Some checks are pending
Deploy / Deploy to prod (push) Waiting to run
Details 
* feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79)

Replace the mgmt SAM stack with a prod-only HCP workspace using the afterhours stub-plus-zip-CD seam so GitHub Actions owns function code and Terraform owns infrastructure.

* fix(infra): pin secret and CMK ARNs for bootstrap-plan

hcptf-bootstrap-plan cannot ssm:GetParameter or DescribeSecret, so the first plan must not data-source those values.

* fix(infra): add EIP describe and DynamoDB CMK grants for first apply

Scoped apply missed ec2:DescribeAddressesAttribute and kms Encrypt/Decrypt/GenerateDataKey on the table CMK.
 2026-09-16 18:29:01 +00:00