@fishawack/lab-env 5.7.0-beta.3 → 5.7.0-beta.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,14 @@
|
|
|
1
1
|
## Changelog
|
|
2
2
|
|
|
3
|
+
### 5.7.0-beta.4 (2026-07-03)
|
|
4
|
+
|
|
5
|
+
#### Bug Fixes
|
|
6
|
+
|
|
7
|
+
* added missing ses permission for fullstack roles ([9da2562](https://bitbucket.org/fishawackdigital/lab-env/commits/9da256264ef3ac923bcf4acf0b531e28c3aa154f))
|
|
8
|
+
* correctly tag iam ec2 role for eb with tags ([204aced](https://bitbucket.org/fishawackdigital/lab-env/commits/204acedd6f63af0b6c72875b12b6e97660dfa6a3))
|
|
9
|
+
* safe check the fail property on scans as sometimes the file doesnt exist ([e5b5e39](https://bitbucket.org/fishawackdigital/lab-env/commits/e5b5e39251e6c1c22ec7f9cf155ad5c86492e9cb))
|
|
10
|
+
* session domain now the domain given exactly ([8071c91](https://bitbucket.org/fishawackdigital/lab-env/commits/8071c911a54c869661469fe2fdcdcc3ffc10cb2b))
|
|
11
|
+
|
|
3
12
|
### 5.7.0-beta.3 (2026-07-01)
|
|
4
13
|
|
|
5
14
|
#### Features
|
|
@@ -170,6 +170,7 @@ module.exports.syncFWIAMPolicies = async (
|
|
|
170
170
|
"arn:aws:iam::aws:policy/AmazonRDSFullAccess",
|
|
171
171
|
"arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess",
|
|
172
172
|
"arn:aws:iam::aws:policy/SecretsManagerReadWrite",
|
|
173
|
+
"arn:aws:iam::aws:policy/AmazonSESFullAccess",
|
|
173
174
|
);
|
|
174
175
|
}
|
|
175
176
|
|
|
@@ -356,12 +357,20 @@ module.exports.getRole = async (RoleName) => {
|
|
|
356
357
|
return res;
|
|
357
358
|
};
|
|
358
359
|
|
|
359
|
-
module.exports.createRole = async (
|
|
360
|
+
module.exports.createRole = async (
|
|
361
|
+
RoleName,
|
|
362
|
+
AssumeRolePolicyDocument,
|
|
363
|
+
Tags,
|
|
364
|
+
) => {
|
|
360
365
|
let res = await Spinner.prototype.simple(
|
|
361
366
|
`Creating the role ${RoleName}`,
|
|
362
367
|
() => {
|
|
363
368
|
return getClient().send(
|
|
364
|
-
new CreateRoleCommand({
|
|
369
|
+
new CreateRoleCommand({
|
|
370
|
+
RoleName,
|
|
371
|
+
AssumeRolePolicyDocument,
|
|
372
|
+
...(Tags && Tags.length ? { Tags } : {}),
|
|
373
|
+
}),
|
|
365
374
|
);
|
|
366
375
|
},
|
|
367
376
|
);
|
|
@@ -369,12 +378,15 @@ module.exports.createRole = async (RoleName, AssumeRolePolicyDocument) => {
|
|
|
369
378
|
return res;
|
|
370
379
|
};
|
|
371
380
|
|
|
372
|
-
module.exports.createInstanceProfile = async (InstanceProfileName) => {
|
|
381
|
+
module.exports.createInstanceProfile = async (InstanceProfileName, Tags) => {
|
|
373
382
|
let res = await Spinner.prototype.simple(
|
|
374
383
|
`Creating the instance profile ${InstanceProfileName}`,
|
|
375
384
|
() => {
|
|
376
385
|
return getClient().send(
|
|
377
|
-
new CreateInstanceProfileCommand({
|
|
386
|
+
new CreateInstanceProfileCommand({
|
|
387
|
+
InstanceProfileName,
|
|
388
|
+
...(Tags && Tags.length ? { Tags } : {}),
|
|
389
|
+
}),
|
|
378
390
|
);
|
|
379
391
|
},
|
|
380
392
|
);
|
|
@@ -588,6 +600,7 @@ module.exports.ensureEnvironmentInstanceProfile = async (
|
|
|
588
600
|
ebSlug,
|
|
589
601
|
s3BucketName,
|
|
590
602
|
opensearchDomainArn,
|
|
603
|
+
tags,
|
|
591
604
|
) => {
|
|
592
605
|
const role = `${ebSlug}-role`;
|
|
593
606
|
|
|
@@ -608,9 +621,10 @@ module.exports.ensureEnvironmentInstanceProfile = async (
|
|
|
608
621
|
},
|
|
609
622
|
],
|
|
610
623
|
}),
|
|
624
|
+
tags,
|
|
611
625
|
);
|
|
612
626
|
|
|
613
|
-
await module.exports.createInstanceProfile(role);
|
|
627
|
+
await module.exports.createInstanceProfile(role, tags);
|
|
614
628
|
await module.exports.attachRoleToInstanceProfile(role, role);
|
|
615
629
|
}
|
|
616
630
|
|
|
@@ -814,6 +814,7 @@ module.exports.fullstack = async (
|
|
|
814
814
|
name,
|
|
815
815
|
s3Slug,
|
|
816
816
|
opensearchDomainArn,
|
|
817
|
+
tags,
|
|
817
818
|
);
|
|
818
819
|
} else {
|
|
819
820
|
await aws.iam.ensureEBInstanceProfileExists();
|
|
@@ -960,11 +961,7 @@ module.exports.fullstack = async (
|
|
|
960
961
|
...mailCreds,
|
|
961
962
|
APP_NAME: appName,
|
|
962
963
|
APP_DOMAIN: appDomain,
|
|
963
|
-
SESSION_DOMAIN: appDomain
|
|
964
|
-
? appDomain.split(".").length > 2
|
|
965
|
-
? appDomain.split(".").slice(1).join(".")
|
|
966
|
-
: appDomain
|
|
967
|
-
: undefined,
|
|
964
|
+
SESSION_DOMAIN: appDomain || undefined,
|
|
968
965
|
},
|
|
969
966
|
);
|
|
970
967
|
|
|
@@ -1099,11 +1096,7 @@ module.exports.fullstack = async (
|
|
|
1099
1096
|
...cacheData,
|
|
1100
1097
|
APP_NAME: appName,
|
|
1101
1098
|
APP_DOMAIN: appDomain,
|
|
1102
|
-
SESSION_DOMAIN: appDomain
|
|
1103
|
-
? appDomain.split(".").length > 2
|
|
1104
|
-
? appDomain.split(".").slice(1).join(".")
|
|
1105
|
-
: appDomain
|
|
1106
|
-
: undefined,
|
|
1099
|
+
SESSION_DOMAIN: appDomain || undefined,
|
|
1107
1100
|
},
|
|
1108
1101
|
);
|
|
1109
1102
|
|
package/commands/scan.js
CHANGED
|
@@ -32,7 +32,7 @@ const run = () => {
|
|
|
32
32
|
});
|
|
33
33
|
|
|
34
34
|
if (failed) {
|
|
35
|
-
if (_.coreConfig
|
|
35
|
+
if (_.coreConfig?.attributes?.failOnScanErrors) {
|
|
36
36
|
throw new Error(
|
|
37
37
|
"Scan found issues. Failing the build as failOnScanErrors flag is set to true.",
|
|
38
38
|
);
|