adam/payments-dashboard
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/payments-dashboard.git synced 2026-10-06 18:12:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
131 commits 5 branches 1 tag 1.9 MiB
Commit graph

3 commits

Author SHA1 Message Date
Adam Moussa
6291b1abfa
refactor(iam): forget in-repo HCP exec roles 
Org-baseline owns the apply and plan roles, so this workspace can assume them without a bootstrap window. Prod state forgets the old addresses without destroying the live roles.
 2026-10-01 20:40:27 -04:00
Adam Moussa
30a1737345
feat(ci): deploy Lambda zips through the org reusable (PLAT-79) (#119)
Some checks failed
Deploy / Deploy to dev (push) Has been cancelled
Details
Deploy / Deploy to prod (push) Has been cancelled
Details 
* feat(ci): deploy Lambda zips through the org reusable (PLAT-79)

* fix(iam): trust only this account's deploy environment (PLAT-79)
 2026-09-28 19:41:09 +00:00
Adam Moussa
0e3e95c240
feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79) (#109)
Some checks are pending
Deploy / Deploy to prod (push) Waiting to run
Details 
* feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79)

Replace the mgmt SAM stack with a prod-only HCP workspace using the afterhours stub-plus-zip-CD seam so GitHub Actions owns function code and Terraform owns infrastructure.

* fix(infra): pin secret and CMK ARNs for bootstrap-plan

hcptf-bootstrap-plan cannot ssm:GetParameter or DescribeSecret, so the first plan must not data-source those values.

* fix(infra): add EIP describe and DynamoDB CMK grants for first apply

Scoped apply missed ec2:DescribeAddressesAttribute and kms Encrypt/Decrypt/GenerateDataKey on the table CMK.
 2026-09-16 18:29:01 +00:00