Skip to content

Add developer policy for local running against CODE db - #928

Merged
bryophyta merged 1 commit into
mainfrom
pf/developer-policy
Jul 20, 2026
Merged

Add developer policy for local running against CODE db#928
bryophyta merged 1 commit into
mainfrom
pf/developer-policy

Conversation

@bryophyta

@bryophyta bryophyta commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

What does this change?

Adds a developer policy with all (and hopefully only) the permissions you need in order to run the app locally against the CODE database, e.g. using ./scripts/start --use-CODE.

I also had to upgrade GuCDK in order to get the right constructs, so there are a couple of changes in this branch to accommodate that. They could be split out into a separate PR if distracting here.

How to test

  • Deploy branch to CODE
  • Grant yourself DeveloperPolicyGrants.newswiresLocalRunAgainstCodeDb access via Janus
  • Get credentials for this policy from Janus
  • Run ./scripts/start --use-CODE to start Newswires locally; everything should work as it does when you have full developer credentials available locally

Images

Introducing DB migrations?

Database migrations need to be applied manually before releasing. The docs can be found in db/README.md

  • Database migrations have been applied for CODE
  • Database migrations have been applied for PROD

@bryophyta
bryophyta force-pushed the pf/developer-policy branch from f946c3b to d4caec3 Compare July 6, 2026 15:00
@bryophyta bryophyta added maintenance Departmental tracking: maintenance work, not a fix or a feature feature Departmental tracking: work on a new feature labels Jul 6, 2026
@bryophyta
bryophyta force-pushed the pf/developer-policy branch 2 times, most recently from 3104f65 to f07131d Compare July 6, 2026 15:08
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

@bryophyta
bryophyta force-pushed the pf/developer-policy branch from ab65254 to c73edc6 Compare July 14, 2026 11:42
@bryophyta bryophyta changed the title Initial attempt at developer policy for local running Add developer policy for local running against CODE db Jul 15, 2026
@bryophyta
bryophyta force-pushed the pf/developer-policy branch from 305b8b3 to 4e71106 Compare July 16, 2026 19:56
@bryophyta
bryophyta force-pushed the pf/developer-policy branch from 4e71106 to b1db20f Compare July 16, 2026 20:17
@bryophyta
bryophyta marked this pull request as ready for review July 17, 2026 09:52
@bryophyta
bryophyta requested a review from a team as a code owner July 17, 2026 09:52

@lindseydew lindseydew left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍 nice work

Comment thread cdk/lib/newswires.ts
);

// Developer policy allowing engineers to run the app locally against the
// CODE database (./scripts/start --use-CODE). No-op outside the CODE stack (and included in TEST so we get the snapshot).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@bryophyta
bryophyta merged commit 0996904 into main Jul 20, 2026
7 checks passed
@bryophyta
bryophyta deleted the pf/developer-policy branch July 20, 2026 13:59
@gu-prout

gu-prout Bot commented Jul 20, 2026

Copy link
Copy Markdown

Overdue on PROD (merged by @bryophyta 10 minutes and 4 seconds ago) What's gone wrong?

@gu-prout

gu-prout Bot commented Jul 20, 2026

Copy link
Copy Markdown

Seen on PROD (merged by @bryophyta 12 minutes and 14 seconds ago) Please check your changes!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feature Departmental tracking: work on a new feature maintenance Departmental tracking: maintenance work, not a fix or a feature Seen-on-PROD

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants