Test monthly release 2021.06 qa-heal.planx-pla.net 1623861140

[themarcelor]

Applying version 2021.06 to qa-heal.planx-pla.net

[PlanXCyborg]

qa-heal.planx-pla.net/manifest.json

Deployment changes

• arborist
  • Needs Fence later than 4.22.2 or 2020.08 (which introduces the new JWT scopes claim). (uc-cdis/(PXP-6617): remove scopes from jwt aud claim arborist#130)
• audit-service
  • If a previous version of the audit service has already been deployed, run kubectl delete secret audit-g3auto and gen3 kube-setup-audit-service to configure the audit SQS and update the configuration file. REQUIRES Fence 5.1.0 or more recent. OR to disable pulling from a queue, update the configuration file manually to disable "PULL_FROM_QUEUE" (uc-cdis/PXP-7805 Fetch audit logs from an AWS SQS audit-service#2)
• fence
  • This commit includes patches to allow old style refresh tokens and API keys to pass new style validation, while issuing new style refresh tokens and API keys. Since refresh tokens and API keys have a default TTL of 30 days, stay on this tag for 30 days if possible. (uc-cdis/PXP-6617 Remove scopes from aud claim in tokens fence#839)
  • Old access tokens will NOT work once this is deployed so active sessions may be temporarily interrupted. (uc-cdis/PXP-6617 Remove scopes from aud claim in tokens fence#839)
• indexd
  • When running gen3authz, backoff package needed separate poetry run pip install (uc-cdis/PXP-6824: return 401 errors from Arborist indexd#304)