cdklabs.cdk-cicd-wrapper 2.3.2__tar.gz → 2.3.4__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. {cdklabs_cdk_cicd_wrapper-2.3.2/src/cdklabs.cdk_cicd_wrapper.egg-info → cdklabs_cdk_cicd_wrapper-2.3.4}/PKG-INFO +13 -1
  2. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/README.md +11 -0
  3. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/setup.py +3 -2
  4. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs/cdk_cicd_wrapper/__init__.py +725 -60
  5. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs/cdk_cicd_wrapper/_jsii/__init__.py +3 -2
  6. cdklabs_cdk_cicd_wrapper-2.3.4/src/cdklabs/cdk_cicd_wrapper/_jsii/cdk-cicd-wrapper@2.3.4.jsii.tgz +0 -0
  7. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4/src/cdklabs.cdk_cicd_wrapper.egg-info}/PKG-INFO +13 -1
  8. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs.cdk_cicd_wrapper.egg-info/SOURCES.txt +1 -1
  9. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs.cdk_cicd_wrapper.egg-info/requires.txt +1 -0
  10. cdklabs_cdk_cicd_wrapper-2.3.2/src/cdklabs/cdk_cicd_wrapper/_jsii/cdk-cicd-wrapper@2.3.2.jsii.tgz +0 -0
  11. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/LICENSE +0 -0
  12. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/MANIFEST.in +0 -0
  13. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/pyproject.toml +0 -0
  14. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/setup.cfg +0 -0
  15. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs/cdk_cicd_wrapper/py.typed +0 -0
  16. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs.cdk_cicd_wrapper.egg-info/dependency_links.txt +0 -0
  17. {cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/src/cdklabs.cdk_cicd_wrapper.egg-info/top_level.txt +0 -0
{cdklabs_cdk_cicd_wrapper-2.3.2/src/cdklabs.cdk_cicd_wrapper.egg-info → cdklabs_cdk_cicd_wrapper-2.3.4}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: cdklabs.cdk-cicd-wrapper
3
- Version: 2.3.2
3
+ Version: 2.3.4
4
4
  Summary: This repository contains the infrastructure as code to wrap your AWS CDK project with CI/CD around it.
5
5
  Home-page: https://github.com/cdklabs/cdk-cicd-wrapper.git
6
6
  Author: CDK CI/CD Wrapper Team
@@ -22,6 +22,7 @@ Requires-Python: >=3.10
22
22
  Description-Content-Type: text/markdown
23
23
  License-File: LICENSE
24
24
  Requires-Dist: aws-cdk-lib<3.0.0,>=2.195.0
25
+ Requires-Dist: aws-cdk.app-staging-synthesizer-alpha==2.195.0.a0
25
26
  Requires-Dist: cdk-nag<3.0.0,>=2.37.55
26
27
  Requires-Dist: cdk-pipelines-github<0.5.0,>=0.4.132
27
28
  Requires-Dist: constructs<11.0.0,>=10.5.0
@@ -47,6 +48,7 @@ The [CDK CI/CD Wrapper](https://cdklabs.github.io/cdk-cicd-wrapper/) is a compre
47
48
  * [Defining Stages](#defining-stages)
48
49
  * [Configuring Stacks](#configuring-stacks)
49
50
  * [Customizing CI/CD Steps](#customizing-cicd-steps)
51
+ * [Autopilot Deployment Contracts](#autopilot-deployment-contracts)
50
52
  * [Contributing](#contributing)
51
53
  * [License](#license)
52
54
 
@@ -114,6 +116,16 @@ Configure the CDK stacks you want to deploy in each stage. The CDK CI/CD Wrapper
114
116
 
115
117
  Tailor the CI/CD pipeline to meet your project's specific requirements. The CDK CI/CD Wrapper provides built-in dependency injection, allowing you to customize the CI/CD steps seamlessly.
116
118
 
119
+ ## Autopilot Deployment Contracts
120
+
121
+ | Area | Contract |
122
+ | ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
123
+ | `APP_STAGING` | Valid for direct/local `cdk deploy` (including local `cdk-cicd deploy --from-image`) and Repo 1 container-image synthesis. Wrapper-generated deployment pipelines—flat `CODEPIPELINE`, Repo 2, `CDK_PIPELINES`, and `GITHUB_ACTIONS`—reject it. On direct/local paths, custom deploy and CloudFormation execution roles govern application stacks; staging support resources use caller/base credentials. |
124
+ | Deploy-role `ExternalId` | `CDK_PIPELINES` and `GITHUB_ACTIONS` reject configured deploy-role ExternalIds rather than silently dropping them. `APP_STAGING` accepts custom deployment identities but rejects a deploy-role ExternalId because the alpha API does not expose one. |
125
+ | CloudFormation execution role | CodeBuild assumes the deployment role; that assumed role passes the configured CloudFormation execution role to CloudFormation. Grant `iam:PassRole` to the deployment role, not directly to the CodeBuild project role. |
126
+ | Custom CodeBuild ECR image | A private ECR environment image must be in the CodeBuild project's Region; flat CodePipeline and CDK Pipelines also require the pipeline account. Repo 2 supports its explicit cross-account image path only after the owner-side repository policy is configured and `crossAccountEcrRepositoryPolicyConfigured` is acknowledged; the build-image Region rule still applies. |
127
+ | GitHub manual approval | Configure required reviewers on each generated GitHub Environment, then set `githubActions.environmentProtectionConfigured: true`. Referencing an environment in workflow YAML does not configure its protection rules. |
128
+
117
129
  ## Contributing
118
130
 
119
131
  Contributions to the CDK CI/CD Wrapper are welcome! If you'd like to contribute, please follow the guidelines outlined in the [CONTRIBUTING.md](CONTRIBUTING.md) file.
{cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/README.md RENAMED
@@ -17,6 +17,7 @@ The [CDK CI/CD Wrapper](https://cdklabs.github.io/cdk-cicd-wrapper/) is a compre
17
17
  * [Defining Stages](#defining-stages)
18
18
  * [Configuring Stacks](#configuring-stacks)
19
19
  * [Customizing CI/CD Steps](#customizing-cicd-steps)
20
+ * [Autopilot Deployment Contracts](#autopilot-deployment-contracts)
20
21
  * [Contributing](#contributing)
21
22
  * [License](#license)
22
23
 
@@ -84,6 +85,16 @@ Configure the CDK stacks you want to deploy in each stage. The CDK CI/CD Wrapper
84
85
 
85
86
  Tailor the CI/CD pipeline to meet your project's specific requirements. The CDK CI/CD Wrapper provides built-in dependency injection, allowing you to customize the CI/CD steps seamlessly.
86
87
 
88
+ ## Autopilot Deployment Contracts
89
+
90
+ | Area | Contract |
91
+ | ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
92
+ | `APP_STAGING` | Valid for direct/local `cdk deploy` (including local `cdk-cicd deploy --from-image`) and Repo 1 container-image synthesis. Wrapper-generated deployment pipelines—flat `CODEPIPELINE`, Repo 2, `CDK_PIPELINES`, and `GITHUB_ACTIONS`—reject it. On direct/local paths, custom deploy and CloudFormation execution roles govern application stacks; staging support resources use caller/base credentials. |
93
+ | Deploy-role `ExternalId` | `CDK_PIPELINES` and `GITHUB_ACTIONS` reject configured deploy-role ExternalIds rather than silently dropping them. `APP_STAGING` accepts custom deployment identities but rejects a deploy-role ExternalId because the alpha API does not expose one. |
94
+ | CloudFormation execution role | CodeBuild assumes the deployment role; that assumed role passes the configured CloudFormation execution role to CloudFormation. Grant `iam:PassRole` to the deployment role, not directly to the CodeBuild project role. |
95
+ | Custom CodeBuild ECR image | A private ECR environment image must be in the CodeBuild project's Region; flat CodePipeline and CDK Pipelines also require the pipeline account. Repo 2 supports its explicit cross-account image path only after the owner-side repository policy is configured and `crossAccountEcrRepositoryPolicyConfigured` is acknowledged; the build-image Region rule still applies. |
96
+ | GitHub manual approval | Configure required reviewers on each generated GitHub Environment, then set `githubActions.environmentProtectionConfigured: true`. Referencing an environment in workflow YAML does not configure its protection rules. |
97
+
87
98
  ## Contributing
88
99
 
89
100
  Contributions to the CDK CI/CD Wrapper are welcome! If you'd like to contribute, please follow the guidelines outlined in the [CONTRIBUTING.md](CONTRIBUTING.md) file.
{cdklabs_cdk_cicd_wrapper-2.3.2 → cdklabs_cdk_cicd_wrapper-2.3.4}/setup.py RENAMED
@@ -5,7 +5,7 @@ kwargs = json.loads(
5
5
  """
6
6
  {
7
7
  "name": "cdklabs.cdk-cicd-wrapper",
8
- "version": "2.3.2",
8
+ "version": "2.3.4",
9
9
  "description": "This repository contains the infrastructure as code to wrap your AWS CDK project with CI/CD around it.",
10
10
  "license": "Apache-2.0",
11
11
  "url": "https://github.com/cdklabs/cdk-cicd-wrapper.git",
@@ -26,7 +26,7 @@ kwargs = json.loads(
26
26
  ],
27
27
  "package_data": {
28
28
  "cdklabs.cdk_cicd_wrapper._jsii": [
29
- "cdk-cicd-wrapper@2.3.2.jsii.tgz"
29
+ "cdk-cicd-wrapper@2.3.4.jsii.tgz"
30
30
  ],
31
31
  "cdklabs.cdk_cicd_wrapper": [
32
32
  "py.typed"
@@ -35,6 +35,7 @@ kwargs = json.loads(
35
35
  "python_requires": ">=3.10",
36
36
  "install_requires": [
37
37
  "aws-cdk-lib>=2.195.0, <3.0.0",
38
+ "aws-cdk.app-staging-synthesizer-alpha==2.195.0.a0",
38
39
  "cdk-nag>=2.37.55, <3.0.0",
39
40
  "cdk-pipelines-github>=0.4.132, <0.5.0",
40
41
  "constructs>=10.5.0, <11.0.0",