Skip to content

Chore: [AEA-0000] - fix to deploy MTLS#2987

Merged
tstephen-nhs merged 1 commit intomainfrom
aea-000-comma-kid
Apr 22, 2026
Merged

Chore: [AEA-0000] - fix to deploy MTLS#2987
tstephen-nhs merged 1 commit intomainfrom
aea-000-comma-kid

Conversation

@tstephen-nhs
Copy link
Copy Markdown
Contributor

Summary

  • 🤖 Operational or Infrastructure Change

Details

Correct comma to colon

@sonarqubecloud
Copy link
Copy Markdown

@tstephen-nhs tstephen-nhs marked this pull request as ready for review April 22, 2026 12:28
Copilot AI review requested due to automatic review settings April 22, 2026 12:28
@tstephen-nhs tstephen-nhs merged commit 2996217 into main Apr 22, 2026
17 checks passed
@tstephen-nhs tstephen-nhs deleted the aea-000-comma-kid branch April 22, 2026 12:28
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes the JSON payload construction used by the deploy script when mutual TLS is enabled, so the kid field is correctly included when invoking the Proxygen secret-put Lambda.

Changes:

  • Fix jq object syntax in the mTLS secret payload (kid key now correctly maps to $kid).
Comments suppressed due to low confidence (1)

.github/scripts/deploy_api.sh:143

  • eval "cat response.json | jq ..." is unnecessary here and makes the control flow harder to reason about (and eval is best avoided in shell scripts). You can run jq -e '.FunctionError' response.json >/dev/null directly (optionally redirecting stderr), which is simpler and avoids eval entirely.
        if eval "cat response.json | jq -e '.FunctionError' >/dev/null"; then
            echo 'Error calling lambda'

--arg kid "${PROXYGEN_KID}" \
--arg proxygenSecretName "${proxygen_private_key_arn}" \
'{apiName: $apiName, environment: $environment, secretName: $secretName, secretKey: $secretKey, secretCert: $secretCert, kid, $kid, proxygenSecretName: $proxygenSecretName}' > payload.json
'{apiName: $apiName, environment: $environment, secretName: $secretName, secretKey: $secretKey, secretCert: $secretCert, kid: $kid, proxygenSecretName: $proxygenSecretName}' > payload.json
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants