Skip to content

fix(aws static-site): aws-cli in runner image + honour baseDnsZone#281

Closed
smecsia wants to merge 2 commits into
mainfrom
fix/github-actions-image-aws-cli
Closed

fix(aws static-site): aws-cli in runner image + honour baseDnsZone#281
smecsia wants to merge 2 commits into
mainfrom
fix/github-actions-image-aws-cli

Conversation

@smecsia
Copy link
Copy Markdown
Contributor

@smecsia smecsia commented May 20, 2026

No description provided.

`pkg/clouds/pulumi/aws/static_website.go` shells out to `aws s3 sync`
via Pulumi `local.NewCommand`, but neither the prod nor staging
Dockerfile installed the AWS CLI — every static-site stack run under
the simplecontainer/github-actions image failed with
`/bin/sh: aws: not found`.

Adding the alpine `aws-cli` package (community repo, python-based)
to the runtime layer of both images + extending the build-time
smoke test to cover `aws --version`.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@smecsia smecsia requested a review from Cre-eD as a code owner May 20, 2026 22:13
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 20, 2026

Semgrep Scan Results

Repository: api | Commit: 6c96564

Check Status Details
⚠️ Semgrep Warning 10 warning(s), 10 total

Scanned at 2026-05-20 22:21 UTC

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 20, 2026

Security Scan Results

Repository: api | Commit: 6c96564

Check Status Details
✅ Secret Scan Pass No secrets detected
✅ Dependencies (Trivy) Pass 0 total (no critical/high)
✅ Dependencies (Grype) Pass 0 total (no critical/high)
📦 SBOM Generated 528 components (CycloneDX)

Scanned at 2026-05-20 22:21 UTC

…ured

aws.StaticSiteInput embeds api.StackConfigStatic (which carries Site.
BaseDnsZone) but never exposed an OverriddenBaseZone() method, so the
type assertion in pulumi/deploy.go fell through and the Cloudflare
registrar fell back to the parent stack's default zone. Records
intended for e.g. simple-forge.com landed in the simple-container.com
zone and Cloudflare appended the suffix → simple-forge.com.simple-
container.com.

GCP, Lambda and ECS Fargate inputs already implement the interface;
this just restores parity.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@smecsia smecsia changed the title fix(github-actions-image): install aws-cli so static-site sync works fix(aws static-site): aws-cli in runner image + honour baseDnsZone May 20, 2026
@smecsia smecsia closed this May 20, 2026
@smecsia smecsia deleted the fix/github-actions-image-aws-cli branch May 20, 2026 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant