Authentication on CuraDevOps

GitHub may require auth for unauthenticated HTTPS clones during high traffic

Mon, 19 Oct 2026 17:18:05 +0000

Platform/SRE — Plan: Infrastructure automation (Terraform module fetches, Helm chart pulls, init containers) that clones public GitHub repos over unauthenticated HTTPS could intermittently fail; audit and add GitHub credentials to affected workflows.
CI/CD — Plan: Pipelines cloning public GitHub repos over unauthenticated HTTPS risk intermittent checkout failures; audit all pipeline steps using unauthenticated HTTPS and switch to authenticated HTTPS (GITHUB_TOKEN) or SSH to ensure reliability.
Leader — Skip

Sat, 10 Oct 2026 16:03:07 +0000

Platform/SRE — Learn: Newly GA OAuth support for Lambda Kafka ESM unblocks regulated-industry workloads that couldn’t use SASL/PLAIN or mTLS; worth noting if the team runs Kafka clusters consumed by Lambda, but no existing configuration needs to change.
CI/CD — Skip
Leader — Skip

Tue, 06 Oct 2026 17:01:10 +0000

Platform/SRE — Plan: If you run AWS Batch compute environments on EKS, you can now migrate from the aws-auth ConfigMap to the newer access entry API for IAM-principal authentication; schedule an UpdateComputeEnvironment pass to set accessEntry.desiredState=ENABLED, simplifying auth lifecycle management on those clusters.
CI/CD — Skip
Leader — Skip

Sat, 03 Oct 2026 15:01:20 +0000

Platform/SRE — Learn: Infrastructure automation using GitHub App tokens (e.g., Flux, Argo CD, Terraform GitHub provider) should still work without changes, but teams relying on token introspection or format-specific parsing should verify compatibility with the new stateless format.
CI/CD — Plan: The rollout is complete, so all newly minted GitHub App installation tokens already use the stateless format; audit any pipeline code or tooling that parses or makes structural assumptions about token format to confirm nothing breaks.
Leader — Skip