Jon Chery
3b1181f39b
v1.14 NFR Refinement milestone complete. 20 execution phases (P1-P20) + 1 final (P21). All P1/P2 backlog from v1.11 review resolved. Security posture hardened (swallowed errors, account ID externalized, IAM scoped, schema validation, credential hygiene). Stubs resolved (kyverno --kube- version removed). 7 untested scripts gained coverage. Documentation synced (ARCHITECTURE v1.11-v1.14 addenda, stale @v1.6-1.9 -> @v1.13, GRILL G-005/G-008 resolved, COST.md window extended, D-083 deferral recorded). Platform VPC parameterized. 561 tests pass (was 528 at v1.13.2; +33). 22/22 capabilities Verified. 6 grill binding decisions (G-101..G-106) applied. 1 escalation (E-001) auto-resolved at full autonomy (D-101). ---ci--- project: acdl phase: 21 milestone: v1.14 status: complete ---/ci---
21 lines
785 B
YAML
21 lines
785 B
YAML
# Complex static-assets deployment (S3 + CloudFront + WAF)
|
|
# Modify variant: same bucket_name as simple (in-place modify, tunes CDN
|
|
# TTLs + price class + viewer protocol policy). The simple example uses
|
|
# the cloudfront interface defaults (default_ttl=3600, max_ttl=86400,
|
|
# PriceClass_100, redirect-to-https); this complex example sets explicit
|
|
# non-default values so the lifecycle "modify" step exercises a real
|
|
# terraform diff on the cloudfront distribution, not an idempotent
|
|
# re-apply.
|
|
environment: dev
|
|
id: assets
|
|
infrastructure:
|
|
static-assets:
|
|
inputs:
|
|
bucket_name: my-static-site
|
|
default_ttl: 7200
|
|
max_ttl: 172800
|
|
price_class: PriceClass_200
|
|
region: us-east-1
|
|
viewer_protocol_policy: https-only
|
|
version: 1.0.0
|
|
name: static assets |