Repository navigation
Conversation
The pinned image, CIS Red Hat Enterprise Linux 8 Benchmark - STIG v07 (ami-0ca8a2e788e4c5869), was deprecated on 2026-10-05 at 19:38 UTC. The framework's image lookup excludes deprecated images, so the next deploy fails at Terraform apply with "Your query returned no results", as keycloak's run 37492356317 did. No deploy has run here since; the last one failed earlier, on the account's 32-vCPU limit. Pin v10 (ami-099eb08281f527485), the same Marketplace product (bysa8cc41lo4owixsmqw6v44f) published on 2026-10-05. Its root and data device layout matches v07, so the /dev/sdf override still applies, and nessus has deployed on it (run 37522249153). The comment no longer calls it the base the secure-wazuh Linux legs use, because secure-wazuh still pins v07. It names the failure instead, so the next deprecation is found by its error.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
The next AWS Deploy here fails at Terraform apply, before Ansible runs:
The pinned image, CIS Red Hat Enterprise Linux 8 Benchmark - STIG v07, still exists, but the vendor
deprecated it on 2026-10-05 at 19:38 UTC, and the framework's image lookup excludes deprecated images.
keycloak's deploy 37492356317 failed exactly this way. This repository's last deploy (37356584852, 2026-10-05
~18:31 UTC) ran before the deprecation and failed on the account's 32-vCPU limit instead.
What
All eleven nodes are pinned to v10,
ami-099eb08281f527485: the same Marketplace product (owner 679593333241,product code
bysa8cc41lo4owixsmqw6v44f), published 2026-10-05./dev/sda1, a 40 GiB gp3/dev/sdf), so theami_block_device_overridesentry for/dev/sdfstill applies.v07. It names the failure instead, so the next deprecation is found by its error.
Proof
The deploy this merge triggers. Merge the fleet's bumps one at a time: the stacks share the account's
32-vCPU limit, which is what failed the scheduled runs on 2026-10-05.
Not in this PR
feat/redis-sentinelrewritesterraform/aws.tfvarswith its own v07 pins, so it will conflicthere; rebase it onto this and keep v10.