Gen3 Monthly Release 2023.09 chicagoland.pandemicresponsecommons.org 1694495878

[PlanXCyborg]

Applying version 2023.09 to chicagoland.pandemicresponsecommons.org

[github-actions]

chicagoland.pandemicresponsecommons.org/manifest.json

Deployment changes

• awshelper
  • Use ENABLE_FENCE_VISA_UPDATE_CRON in the fence manifest (fence-config-public.yaml) to make cronjob fence-visa-update optional. ENABLE_FENCE_VISA_UPDATE_CRON can be set to true or false. Example: ENABLE_FENCE_VISA_UPDATE_CRON: true / ENABLE_FENCE_VISA_UPDATE_CRON: false. The current job status remains unaffected if ENABLE_FENCE_VISA_UPDATE_CRON is not set. (making cronjob fence-visa-update optional cloud-automation#2211)
  • Whitelist *.gen3.org (for helm and docs) (Add *.gen3.org to wildcard whitelist cloud-automation#2241)
• fence
  • Update fence-config.yaml to include parent_to_child_studies_mapping to define parent/child relationships within the dbGaP block of the config. (feat(PXP-10776): Cascading Authorization fence#1102)
• guppy
  • update node from 14 to 16 (update node to 16 guppy#219)
• indexd
  • New columns added to index_record table. Alembic migration needed. (feat(DCF-450): Add DRS Fields indexd#357)
• manifestservice
  • ManifestService does not expect aws_access_key_id and aws_secret_access_key settings anymore. Instead, the service relies on AWS EKS IRSA credentials mounted to the pod. See https://github.com/uc-cdis/manifestservice/blob/master/docs/credentials_breaking_change.md for more details (feat(IAM-SA): Removed AKID references to use IAM SA role instead manifestservice#32)
• portal
  • will require server to also be using guppy ^0.16.0 on backend (chore/updateGuppy: updating guppy to 0.16.0 data-portal#1309)

Breaking changes

• fence
  • Removed most Prometheus support (feat(google_update): updated Flask and deps, also don't fail early with Google errors PXP-10900 fence#1086)
• hatchery
  • /launch endpoint throws an error when there is no pay model selected (For commons with paymodels) (Hatchery pay model improvements hatchery#70)
  • /setPaymodel throws an error when there is no active workspace running. (For commons with paymodels) (Hatchery pay model improvements hatchery#70)
• indexd
  • DRS responses for update_time and created_time reflect the content's updated and created times, not the time they were indexed or their index record was updated. (feat(DCF-450): Add DRS Fields indexd#357)