Skip to content

GitLab

Merged
Created by Andres Rueda@andresRuedaDeveloper

config(ech-cms): declare asset content validation REPORT_ONLY rollout mode

Purpose

Make the initial secure-asset-content-validation rollout mode explicit for ECH CMS.

Changes

  • Set ech.assets.content-validation.mode: REPORT_ONLY in ech-cms-ech07.yml and ech-cms-docker.yml.
  • Do not enable ENFORCE or change policy mappings, limits, or versions.

Validation

  • Both YAML files parse and resolve the property to REPORT_ONLY.
  • git diff --check passes.
  • The effective value in ECH07 has not yet been verified; that requires deployment and a configuration-binding/startup check.

Deployment task — environments without a public Config Server

Configure ech.assets.content-validation.mode=REPORT_ONLY in each environment's private configuration source before restarting or refreshing ECH CMS. Verify and record the effective loaded value per environment; do not infer it from the application default or this repository. A later move to ENFORCE requires its separate rollout evidence and approval. Roll back the mode to REPORT_ONLY if needed; this does not reverse schema or other non-flagged changes.