Adam Moussa
6ef8e9ba2a
feat(terraform): complete dev environment adoption (SH-300) ( #99 )
...
* feat(terraform): complete dev environment adoption
* fix(terraform): preserve dev release permissions
2026-08-31 20:18:44 -03:00
Adam Moussa
24f08d3cb1
feat(terraform): adopt live deployment roles safely ( #94 )
...
* feat(terraform): add safe backend environment adoption
Introduce import-guarded environment roots and retire temporary bootstrap and POC provisioning after ownership transfer.
* ci(deploy): pause dev and staging deployments
Prevent application releases from racing Terraform adoption while retaining production deployment and validation.
* ci(deploy): require manual environment dispatch
* fix: update `required_version` from `>=1.7.0` to `>=1.9.0`
The deploy-boundary check interpolates `var.aws_account_id` and `var.environment`. Terraform only allows other variables inside `validation` from 1.9.0+.
CI already runs against `1.9.8` so `versions.tf` setting version as `>=1.7.0` is a breaking finding
* chore(deps): add `terraform` to renovate dependency coverage
* ci(deploy): drop unprovisioned prod dispatch path
2026-08-31 11:51:18 -04:00
Alexandre Brandizzi
47c3fff4ba
fix(cdk): allow Beanstalk VPC discovery ( #44 )
...
Validate and deploy dev / Validate deployable source bundle (push) Has been cancelled
Validate and deploy dev / Deploy shoc-backend to Elastic Beanstalk dev (push) Has been cancelled
* fix(cdk): allow Beanstalk VPC discovery
* chore(ci): clarify backend check name
* fix(eb): allow temporary object cleanup
* fix(cdk): allow managed environment stack update
* fix(cdk): allow Beanstalk template read
* fix(cdk): apply supported Beanstalk S3 policy
* fix(cdk): allow load balancer discovery and cancel
* fix(cdk): allow Beanstalk resource discovery
2026-07-30 11:40:06 -04:00
brandizzi
76cdc70c18
fix(cdk): allow EB runtime manifest updates
2026-07-29 11:07:53 -03:00
brandizzi
b8db4a7e61
fix(cdk): allow EB bucket policy read
2026-07-29 11:02:30 -03:00
brandizzi
c2f2c411d8
fix(cdk): allow EB extension verification
2026-07-29 10:33:31 -03:00
brandizzi
5b719a660e
fix(cdk): allow EB environment extension write
2026-07-29 09:55:58 -03:00
brandizzi
3f60730464
fix(cdk): allow EB embedded extension write
2026-07-29 09:45:45 -03:00
brandizzi
156b7bbed6
fix(cdk): allow EB runtime version ACL write
2026-07-29 09:30:48 -03:00
brandizzi
9f54399e63
fix(cdk): allow EB runtime version ACL read
2026-07-29 09:26:12 -03:00
brandizzi
424bf20f54
fix(cdk): allow EB runtime verification
2026-07-29 09:21:28 -03:00
brandizzi
42d8772951
fix(cdk): allow EB runtime cleanup
2026-07-29 09:05:44 -03:00
brandizzi
b02787087e
fix(cdk): allow EB runtime bundle copy
2026-07-29 08:56:19 -03:00
brandizzi
061a084fda
fix(cdk): grant AWS-confirmed EB ACL read
2026-07-29 08:01:01 -03:00
Alexandre Brandizzi
658bae77d3
fix(cdk): grant observed Elastic Beanstalk deploy reads ( #38 )
...
Validate and deploy dev / Validate deployable source bundle (push) Waiting to run
Validate and deploy dev / Deploy shoc-backend to Elastic Beanstalk dev (push) Blocked by required conditions
* fix(cdk): grant observed EB deploy reads
* fix(cdk): model EB deployment capability
* fix(cdk): scope EB platform ACL read
* fix(deploy): verify exact EB release
* docs(deploy): record unresolved EB ACL gate
2026-07-28 15:04:48 -03:00
Alexandre Brandizzi
45ffa68dfa
fix: allow Elastic Beanstalk bucket setup check ( #36 )
Validate and deploy dev / Validate deployable source bundle (push) Waiting to run
Validate and deploy dev / Deploy shoc-backend to Elastic Beanstalk dev (push) Blocked by required conditions
2026-07-28 12:51:20 -03:00
Alexandre Brandizzi
34b5f09828
fix: allow deployment bundle validation
2026-07-28 11:12:39 -03:00
Alexandre Brandizzi
9057668459
ci: automate dev backend deployment
2026-07-27 19:26:07 -03:00
