2026-07-13 - SOC2: Deployment Candidate Scripts Migrated to ADC¶
Release¶
AgileData.io - Final Keyfiles Removed: Deployment Candidate Scripts Now Use ADC
The last remaining service account keyfiles in the platform have been removed — this time from the deployment candidate scripts used to determine which tenants receive new deployments. These scripts, which run across all three AgileData layers (functions, API, and GUI), were the final holdout in the SOC2 keyfile remediation effort.
In addition to removing the keyfiles, the OpenTelemetry (OTel) metrics exporter has been disabled before imports in the deployment scripts. The exporter was being initialised too early in the import sequence, causing interference with the ADC credential setup. Disabling it at the correct point in the startup sequence ensures ADC credentials are established cleanly.
With this release, keyfile-based authentication has been fully eliminated across the AgileData platform.
What’s New:
Keyfiles removed from deployment candidate scripts across functions, API, and GUI layers
OpenTelemetry metrics exporter disabled before imports to prevent credential initialisation conflicts
Full keyfile remediation now complete across the entire platform
What this means for you:
The final SOC2 keyfile finding is resolved — all authentication uses short-lived runtime credentials
Deployment scripts are now consistent with the rest of the platform’s security posture
Last Refreshed¶
Doc Refreshed: 2026-07-13