release recent versions to kf prod

[diw2]

https://ctds-planx.atlassian.net/browse/PXP-5578

DON'T MERGE UNTIL GOT KF APPROVAL

Deployment

Release to kf prod

[PlanXCyborg]

data.kidsfirstdrc.org/manifest.json

Deployment changes

• fence
  • To use the new Cognito integration, apply in fence config the changes made to config-default.yaml. Otherwise no action required. (uc-cdis/PXP-5613 Feat/cognito fence#767)
  • In fence-config, the region field of S3_BUCKETS is now required: if not specified, Fence will print a warning and try to call GetBucketLocation. Fence will error at startup if that doesn't work. (uc-cdis/Fix/make region required for s3 bucket config fence#749)
  • Fence does NOT handle c999 the same as before. If using dbgap sync w/ consent code parsing and indexd records have acls with just phsid to represent objects someone w/ c999 should be able to see, you will need to ensure that the records also have the phsid.consent_code as well or users will lose access (uc-cdis/Feat/dbgap options fence#702)
  • Fence has a new configuration to support more dbGaP syncing options: if you require "Common Exchange Area" data access, review the new configuration and supply necessary values (uc-cdis/Feat/dbgap options fence#702)
• portal
  • The Terra template attribute in gitops.json now expects a list of strings, not just a single string. (uc-cdis/Chore/update terra template data-portal#663)
  • Added footer link configuration to portal config: components.footer.links is an array of { text: <string, optional>, href: <string> }. (uc-cdis/(PXP-5571) Add footer links data-portal#661)
  • Added a new property to gitops.json: components.login.contact_link: { text: string, href: string }. If login.contact_link is present, it will be displayed instead of login.email. Email links can be represented in contact_link using "mailto:email@address" as the "href". (uc-cdis/(PXP-5571) Allow contact to be a link on login page data-portal#660)
  • Updated tiered access logic requires Guppy server >= 0.4.0 (uc-cdis/PXP-4794 PXP-4534 Fix/tiered access data-portal#650)
  • New optional title parameter in Terra Export Warning configuration: terraExportWarning: { subjectThreshold: int, title: string(optional), message: string(optional) } (uc-cdis/Make Terra Export Warning title configurable data-portal#656)
  • Added terraExportWarning: { subjectThreshold: <number>, message: <string, optional> } to portal config. (uc-cdis/Feat/terra export warning data-portal#642)
  • New optional portal config flag: dataExplorerConfig.terraTemplate. The value of this parameter is placed in the Terra export URL as the value of the query parameter 'template'. (uc-cdis/Chore/update terra url data-portal#645)
• sheepdog
  • The environment's user.yaml needs to be updated to add the new Sheepdog admin policy/resources/roles; for each user that has admin: true, grant them the new policy. See https://github.com/uc-cdis/commons-users/pull/810 for an example. (uc-cdis/PXP-4102 Feat/arb admin sheepdog#319)
  • Fix Travis coverage reports (combine the results of all 3 tests into one coverage report). (uc-cdis/PXP-3408 Update Sheepdog to Python3 sheepdog#314)

[themarcelor]

Hi @diw2 ,
What about 2020.07?

[diw2]

We are doing indexd migration and kidsfirst team is testing everything in staging before prod. That's why I kept the same version as staging. Maybe we could release to 2020.05 for now and communicate with kf for stable release after this is done? What do you think? @paulineribeyre

[paulineribeyre]

we are releasing 2020.05 because that's what has been going through the QA/staging/prod release process. We're not going to release 2020.05 in QA and 2020.07 in prod lol

[themarcelor]

So just QA 2020.07 in lower tiers first and then deploy 2020.07 to prod (?) lol rofl