Updating Env qa-covid19.planx-pla.net - 2022.06 1656616302

[PlanXCyborg]

Applying version 2022.06 to qa-covid19.planx-pla.net

[PlanXCyborg]

qa-covid19.planx-pla.net/manifest.json

Deployment changes

• arborist
  • Replace Travis with a GitHub workflow for CI (Fix lint CI + replace travis with GH workflow arborist#150)
• awshelper
  • To put gen3ff on / and portal on /portal requires gen3ff version 0.1.0 and portal version 3.23.0 (HP-741 Feat/portal paths cloud-automation#1918)
• fence
  • Requires database migration for a new table to Fence, google Access expiration to add new expires column, and to create iss_sub_pair_to_user table task(qa): Fix analyze data link for jenkins envs #968 Updating QA env with integration202011 qa-brain.planx-pla.net 1602519557 #963 Replace dummy file #973 (Feat/passport fence#964)
  • Requires Arborist >= 2022.04 OR >=3.4.0 (PXP-9480): Support merge param for PUT /resource endpoint arborist#143 (Feat/passport fence#964)
  • To enable Passports -> DRS in an environment you must update Fence Configuration to at a minimum specify GA4GH_PASSPORTS_TO_DRS_ENABLED: true (only do this after coordinating with the environment owner as this has several requirements before it can be enabled, including the need to use Indexd's authz field in ALL records rather than acl) (Feat/passport fence#964)

Breaking changes

• awshelper
  • does not work with Postgres < 10 (which is out of support @ AWS anyways) (derive postgres parameter group version cloud-automation#1954)
• fence
  • URL Signing when no_force_sign query param is provided: Previously Fence would make a decision based off if the data was public and no_force_sign provided. Fence will now NEVER sign if no_force_sign is provided (since the concept of "public" data has been abstracted out of Fence. Data access - public or not - is the sole responsibility of the policy engine). In other words, if no_force_sign is provided at the API level, Fence will respect that regardless of whether the resulting URL will actually work. The default Fence behavior should remain the same. chore/update dd version to 3.6.0 #988 (Feat/passport fence#964)
• hatchery
  • In pay model configs, name has been changed to workspace_type (HP-682 Feat/multiple paymodels  hatchery#44)
  • In pay model configs, aws_account_id has been changed to account_id (HP-682 Feat/multiple paymodels  hatchery#44)
  • In pay model configs, ecs has its type changed from string to bool (HP-682 Feat/multiple paymodels  hatchery#44)
  • In pay model configs, vpcid has been removed (HP-682 Feat/multiple paymodels  hatchery#44)

[PlanXCyborg]

qa-covid19.planx-pla.net/manifest.json

Deployment changes

• arborist
  • Replace Travis with a GitHub workflow for CI (Fix lint CI + replace travis with GH workflow arborist#150)
• awshelper
  • To put gen3ff on / and portal on /portal requires gen3ff version 0.1.0 and portal version 3.23.0 (HP-741 Feat/portal paths cloud-automation#1918)
• fence
  • Requires database migration for a new table to Fence, google Access expiration to add new expires column, and to create iss_sub_pair_to_user table task(qa): Fix analyze data link for jenkins envs #968 Updating QA env with integration202011 qa-brain.planx-pla.net 1602519557 #963 Replace dummy file #973 (Feat/passport fence#964)
  • Requires Arborist >= 2022.04 OR >=3.4.0 (PXP-9480): Support merge param for PUT /resource endpoint arborist#143 (Feat/passport fence#964)
  • To enable Passports -> DRS in an environment you must update Fence Configuration to at a minimum specify GA4GH_PASSPORTS_TO_DRS_ENABLED: true (only do this after coordinating with the environment owner as this has several requirements before it can be enabled, including the need to use Indexd's authz field in ALL records rather than acl) (Feat/passport fence#964)

Breaking changes

• awshelper
  • does not work with Postgres < 10 (which is out of support @ AWS anyways) (derive postgres parameter group version cloud-automation#1954)
• fence
  • URL Signing when no_force_sign query param is provided: Previously Fence would make a decision based off if the data was public and no_force_sign provided. Fence will now NEVER sign if no_force_sign is provided (since the concept of "public" data has been abstracted out of Fence. Data access - public or not - is the sole responsibility of the policy engine). In other words, if no_force_sign is provided at the API level, Fence will respect that regardless of whether the resulting URL will actually work. The default Fence behavior should remain the same. chore/update dd version to 3.6.0 #988 (Feat/passport fence#964)
• hatchery
  • In pay model configs, name has been changed to workspace_type (HP-682 Feat/multiple paymodels  hatchery#44)
  • In pay model configs, aws_account_id has been changed to account_id (HP-682 Feat/multiple paymodels  hatchery#44)
  • In pay model configs, ecs has its type changed from string to bool (HP-682 Feat/multiple paymodels  hatchery#44)
  • In pay model configs, vpcid has been removed (HP-682 Feat/multiple paymodels  hatchery#44)