Jon Chery
2a84c0047b
---ci--- project: acdl phase: 20 milestone: v1.5 status: verify ---/ci--- REQ-46: README rewritten — platform-source vs consumer-repo distinction up front; platform flow converted to mermaid flowchart TD; L3A/L3B + spike nomenclature scrubbed from prose (code paths kept verbatim); prereqs pointer to consumer guide added. REQ-47: docs/CONSUMER_GUIDE.md (generic, all L2 modules) replaces docs/consumer-guide-static-asset.md — mermaid diagrams (model LR + pipeline TD), versioned uses: (@v1.4 floating MAJOR+MINOR, bare/@main discouraged), consumer-scoped prerequisites (no Terraform/Checkov/boto3/runner-key), run- time platform fetch via reusable workflow (consumers never invoke scripts/run_platform.sh locally for the happy path), optional local validation note. REQ-48: Credentials section rewritten — zero-trust OIDC + ABAC default (repo-identity + resource-tag scoping, blast-radius containment); static-key override in GitHub Secrets or .env.secrets with platform-managed daily rotation; consumer rotates out of band when using .env.secrets locally. REQ-49: byte-identical .gitea/workflows/deploy.yml + .github/workflows/ deploy.yml — reusable (on: workflow_call), checks out consumer repo + ACDL platform repo, installs deps, runs run_platform.sh, uploads artifacts; OIDC default (permissions: id-token: write) + static-key override via secrets. REQ-50: contracts/static-asset.yaml uses: @v1.4 (MAJOR+MINOR). REQ-51: tests/test_pipeline_contract.py extended — TestDeployPipelineSchema, TestDeployPipelineContract, TestDeployWorkflowConformance (byte-identical, reusable, contract/mode inputs, run_platform invocation, platform-repo checkout, OIDC permissions), TestSampleContractVersioning. 154 tests pass (19 new); run_ci.sh green. Fixes: modules/l2/static-asset/README.md dangling link retargeted to docs/CONSUMER_GUIDE.md.
17 lines
639 B
YAML
17 lines
639 B
YAML
# ACDL sample consumer contract — static-asset module (dev)
|
|
#
|
|
# This is the reference example for a consumer contract. It declares:
|
|
# uses: the central ACDL deployment pipeline to reference
|
|
# module: which module to deploy (must match a registry key)
|
|
# environment: which environment to deploy to (dev = autonomous)
|
|
# inputs: module-specific inputs
|
|
#
|
|
# Validated against schemas/contract.schema.json.
|
|
# Resolved by acdl_platform/contract_resolver.py to a Target Stack instance.
|
|
|
|
uses: acdl/pipelines/deploy.yaml@v1.4
|
|
module: static-asset
|
|
environment: dev
|
|
inputs:
|
|
bucket_name: acdl-spike-bucket
|
|
region: us-east-1 |