Skip to content

fix(autopilot): harden Repo2 deployment configuration and execution - #278

Open
gmuslia wants to merge 3 commits into
mainfrom
fix/review-dd60-autopilot
Open

fix(autopilot): harden Repo2 deployment configuration and execution#278
gmuslia wants to merge 3 commits into
mainfrom
fix/review-dd60-autopilot

Conversation

@gmuslia

@gmuslia gmuslia commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Description

Fixes 17 Autopilot and Repo2 findings identified when reviewing changes against commit dd60a96.

Changes

  • Fixed regional deployment planning, parallel execution, and bare-stage handling.
  • Corrected per-target image, account, region, and deployment fingerprint behavior.
  • Wired qualifier, synthesizer, plugins, CI image, npm registry, and ordering configuration through all engines.
  • Added required ECR, lookup, and external-ID permissions.
  • Improved APP_STAGING and self-mutating pipeline behavior.
  • Updated documentation and regression coverage.

Testing

  • Unit tests pass (npm run test) — 481 wrapper and 147 CLI tests
  • Built locally (npm run build) — jsii and TypeScript compilation passed

Checklist

  • Conventional-commit title (fix: address autopilot review findings)
  • Breaking changes flagged with feat!: or a BREAKING CHANGE: footer — no breaking changes
  • Docs updated if behaviour changed

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license.

@gmuslia gmuslia changed the title Fixes 17 Autopilot and Repo2 findings identified when reviewing changes against commit dd60a965a2df6daaffcec22cd3210cc45c1e4abf. fix(autopilot): harden Repo2 deployment configuration and execution Sep 3, 2026
' (cd .cdk-cicd-target && ../node_modules/.bin/cdk-cicd deploy --from-image ' +
'--target "$TARGET_STAGE" --yes)',
' else',
' npx cdk-cicd deploy --from-image --target "$TARGET_STAGE" --yes',

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 The new normal Repo2 deployment path invokes the CLI through npx.

npx cdk-cicd deploy --from-image --target "$TARGET_STAGE" --yes

If the local executable cannot resolve, npx can resolve a registry version at deploy time. That makes the deployed CLI version non-deterministic and diverges from the parallel-region branch immediately above, which uses the installed local executable.

Suggestion: define and invoke the project's pinned cdk-cicd npm script (npm run cdk-cicd -- deploy ...) in both branches, so a missing dependency fails deterministically rather than being fetched during deployment.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed. Both normal and parallel Repo 2 deployment paths now invoke the lockfile-installed CLI through npm run cdk-cicd -- deploy .... The parallel path generates a scoped npm script that preserves its narrowed working directory. Tests also assert that no npx fallback remains.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants