Phase 8 Production Hardening with complete governance infrastructure: - Vault integration with tiered policies (T0-T4) - DragonflyDB state management - SQLite audit ledger - Pipeline DSL and templates - Promotion/revocation engine - Checkpoint system for session persistence - Health manager and circuit breaker for fault tolerance - GitHub/Slack integrations - Architectural test pipeline with bug watcher, suggestion engine, council review - Multi-agent chaos testing framework Test Results: - Governance tests: 68/68 passing - E2E workflow: 16/16 passing - Phase 2 Vault: 14/14 passing - Integration tests: 27/27 passing Coverage: 57.6% average across 12 phases Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
103 lines
1.8 KiB
YAML
103 lines
1.8 KiB
YAML
name: infrastructure-deploy
|
|
version: "1.0.0"
|
|
description: Deploy infrastructure with plan review and verification
|
|
|
|
metadata:
|
|
author: system
|
|
tags:
|
|
- infrastructure
|
|
- terraform
|
|
- production
|
|
|
|
inputs:
|
|
target_environment:
|
|
type: string
|
|
required: true
|
|
description: Target environment (sandbox, staging, prod)
|
|
resource_type:
|
|
type: string
|
|
required: true
|
|
description: Type of resource to deploy
|
|
|
|
stages:
|
|
- name: plan
|
|
type: agent
|
|
agent:
|
|
template: terraform
|
|
tier: 1
|
|
config:
|
|
action: plan
|
|
auto_approve: false
|
|
artifacts:
|
|
outputs:
|
|
- terraform-plan
|
|
timeout: 10m
|
|
|
|
- name: security-review
|
|
type: agent
|
|
agent:
|
|
template: code-review
|
|
tier: 0
|
|
config:
|
|
review_focus:
|
|
- security
|
|
- governance_compliance
|
|
requires:
|
|
- plan
|
|
artifacts:
|
|
inputs:
|
|
- terraform-plan
|
|
outputs:
|
|
- security-review-report
|
|
timeout: 5m
|
|
|
|
- name: approval
|
|
type: gate
|
|
gate:
|
|
approval: human
|
|
timeout: 30m
|
|
approvers:
|
|
- infrastructure-team
|
|
requires:
|
|
- security-review
|
|
|
|
- name: apply
|
|
type: agent
|
|
agent:
|
|
template: terraform
|
|
tier: 2
|
|
config:
|
|
action: apply
|
|
plan_id: "${stages.plan.artifacts.terraform-plan}"
|
|
requires:
|
|
- approval
|
|
artifacts:
|
|
inputs:
|
|
- terraform-plan
|
|
outputs:
|
|
- apply-log
|
|
- state-diff
|
|
timeout: 15m
|
|
on_failure:
|
|
action: rollback
|
|
retries: 0
|
|
|
|
- name: verify
|
|
type: agent
|
|
agent:
|
|
template: default
|
|
tier: 0
|
|
config:
|
|
action: verify_deployment
|
|
requires:
|
|
- apply
|
|
timeout: 5m
|
|
|
|
on_failure:
|
|
action: notify
|
|
notify:
|
|
- infrastructure-team
|
|
- security-team
|
|
|
|
timeout: 1h
|