feat(exposure): CloudFront mode for domain-less deployments#680

Draft

allamand wants to merge 19 commits into

feature/agent-platformfrom

feature/cloudfront-exposure

Commits on May 20, 2026

fix(observability): guard spoke scrapers against missing/None securityGroupIds
Workshop User
committed
feat(exposure): add CloudFront exposure mode for domain-less deployments
Workshop User
committed

Commits on May 21, 2026

feat(backstage): support exposure_mode for ALB ingress
Workshop User
committed

Commits on May 22, 2026

fix(backstage): use CNOE-customized image (public.ecr.aws/seb-demo/backstage:cnoe) (#682)
allamand
authored

Commits on May 26, 2026

feat(cloudfront): ALB URL rewrite, IDC/SCIM automation, Backstage GitHub catalog, EKS capabilities
Workshop User
committed

Commits on May 27, 2026

fix: enable OSS LBC on hub (Auto Mode ELB lacks path rewrite support)
Workshop User
committed
feat(gitlab): dedicated NLB + CloudFront for GitLab in cloudfront mode
Workshop User
committed
temp: add gitlab root password overlay for testing
Workshop User
committed
fix: set preserveResourcesOnDeletion on bootstrap appset
Workshop User
committed
feat: add argocd-refresh-token script to scripts/
Workshop User
committed
refactor: move automation scripts from platform/infra/terraform/scripts/ to scripts/
Workshop User
committed
fix: add terminate-op for stuck operations in argocd-sync.sh
Workshop User
committed
docs: add ArgoCD recovery procedures to troubleshoot-platform skill
Workshop User
committed
docs: add CRITICAL warning about ArgoCD app deletion being destructive
Workshop User
committed
fix: make argocd-refresh-token.sh safe to source
Workshop User
committed
fix: use SCRIPT_DIR directly for argocd_token_automation.py path
Workshop User
committed
fix: use readlink -f for robust path resolution when sourced
Workshop User
committed
fix: support zsh for BASH_SOURCE path resolution
Workshop User
committed
fix: remove spoke fleet members (clusters don't exist yet)
Workshop User
committed