tag: Authentication · 4 items
- Platform/SRE — Plan: Infrastructure automation (Terraform module fetches, Helm chart pulls, init containers) that clones public GitHub repos over unauthenticated HTTPS could intermittently fail; audit and add GitHub credentials to affected workflows.
- CI/CD — Plan: Pipelines cloning public GitHub repos over unauthenticated HTTPS risk intermittent checkout failures; audit all pipeline steps using unauthenticated HTTPS and switch to authenticated HTTPS (GITHUB_TOKEN) or SSH to ensure reliability.
- Leader — Skip
- Platform/SRE — Learn: Newly GA OAuth support for Lambda Kafka ESM unblocks regulated-industry workloads that couldn’t use SASL/PLAIN or mTLS; worth noting if the team runs Kafka clusters consumed by Lambda, but no existing configuration needs to change.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: If you run AWS Batch compute environments on EKS, you can now migrate from the aws-auth ConfigMap to the newer access entry API for IAM-principal authentication; schedule an UpdateComputeEnvironment pass to set accessEntry.desiredState=ENABLED, simplifying auth lifecycle management on those clusters.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Infrastructure automation using GitHub App tokens (e.g., Flux, Argo CD, Terraform GitHub provider) should still work without changes, but teams relying on token introspection or format-specific parsing should verify compatibility with the new stateless format.
- CI/CD — Plan: The rollout is complete, so all newly minted GitHub App installation tokens already use the stateless format; audit any pipeline code or tooling that parses or makes structural assumptions about token format to confirm nothing breaks.
- Leader — Skip