Skip to content

docs(intelligent-compute): EC2 backend instance role is per compute env, match it by pattern - #1910

Merged
justinegeffen merged 5 commits into
masterfrom
docs/intelligent-compute-vm-role-per-ce
Oct 14, 2026
Merged

justinegeffen merged 5 commits into
masterfrom
docs/intelligent-compute-vm-role-per-ce

Conversation

@pditommaso

Copy link
Copy Markdown
Contributor

Summary

Docs for seqeralabs/sched#1415, which should ship in the same release.

With the EC2 backend strategy, Intelligent Compute now keeps one instance role per compute environment and bucket set (seqera-sched-vm-instance-ce-<key>) instead of one per cluster (seqera-sched-vm-instance-clu-<id>). It may also remove a role after 30 days without use, then recreate it under the same name on the next run.

Changes to platform-cloud/docs/compute-envs/intelligent-compute.mdx:

  • Cross-account bucket policy example and role table: seqera-sched-vm-instance-clu-* becomes seqera-sched-vm-instance-*. A bucket policy still scoped to -clu-* denies the new roles at task runtime.
  • New note: match these roles by pattern, never by the exact role ARN in Principal. A recreated role gets a new internal principal ID that a policy naming the old role no longer matches. Customers who used -clu-* should widen it to seqera-sched-vm-instance-*.
  • Wording: the IAM table and the S3 access intro no longer say "per cluster" for the EC2 backend.

The Enterprise aws-cloud.md pages only carry the compute policy, which is scoped to seqera-sched-*, so they need no change.

🤖 Generated with Claude Code

…nv, match it by pattern

With the EC2 backend strategy the scheduler now keeps one instance role per
compute environment and bucket set (seqera-sched-vm-instance-ce-<key>) instead of
one per cluster (seqera-sched-vm-instance-clu-<id>), and may remove it after 30
days unused, recreating it under the same name on the next run.

- widen the cross-account bucket-policy pattern and the role table from
  seqera-sched-vm-instance-clu-* to seqera-sched-vm-instance-*
- say to match roles by pattern, not an exact role ARN: a recreated role gets a
  new principal ID that a policy naming the old one no longer matches
- fix the "per cluster" wording in the IAM table and the S3 access intro

Scheduler change: seqeralabs/sched#1415

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Paolo Di Tommaso <paolo.ditommaso@gmail.com>
@netlify

netlify Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

❌ Deploy Preview for seqera-docs failed. Why did it fail? →

Name Link
🔨 Latest commit b449375
🔍 Latest deploy log https://app.netlify.com/projects/seqera-docs/deploys/6acf6a43f7a266bfd3847721

@justinegeffen justinegeffen added 2. Edu reviews complete Reviews complete. Remove label when confirmed in prod. 3. Dev/PM/SME reviews complete SMEs have reviewed and approved. labels Sep 30, 2026
Signed-off-by: Justine Geffen <justinegeffen@users.noreply.github.com>
@justinegeffen
justinegeffen merged commit 09f2cb3 into master Oct 14, 2026
3 of 8 checks passed
@justinegeffen
justinegeffen deleted the docs/intelligent-compute-vm-role-per-ce branch October 14, 2026 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

2. Edu reviews complete Reviews complete. Remove label when confirmed in prod. 3. Dev/PM/SME reviews complete SMEs have reviewed and approved.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants