2026-07-13 - SOC2: Deployment Candidate Scripts Migrated to ADC¶
Release¶
AgileData.io - Final Keyfiles Removed: Deployment Candidate Scripts Now Use ADC
The last remaining service account keyfiles in the platform have been removed, this time from the deployment candidate scripts, which choose which tenants receive a new release. These scripts now use Application Default Credentials (ADC): short-lived credentials that Google Cloud provides at runtime. They were the final holdout in the SOC2 keyfile remediation effort.
A start-up ordering issue that interfered with the new runtime credentials was also fixed, so the credentials are now set up cleanly.
With this release, keyfile-based authentication has been fully eliminated across the AgileData platform.
What’s New:
Keyfiles removed from the deployment candidate scripts
Start-up ordering fixed so runtime credentials load cleanly
Full keyfile remediation now complete across the entire platform
What this means for you:
The final SOC2 keyfile finding is resolved — all authentication uses short-lived runtime credentials
Deployment scripts are now consistent with the rest of the platform’s security posture
Last Refreshed¶
Doc Refreshed: 2026-10-25