Change Requests

We are updating the firewall ruleset on the production payment gateway to allow egress to a new payment service provider endpoint ahead of the Q4 settlement cutover. The change adds outbound rules on the perimeter firewall pair and updates the associated TLS inspection policy so the new PSP certificate chain is trusted. DNS conditional forwarding for the PSP domain is also being updated, and the load balancer health check target changes to the new endpoint. The firewall appliances are being moved to the vendor's current firmware release as part of the same window, since the TLS inspection feature we need is not available on the installed version. Transaction logging continues through the existing pipeline. Card data remains in scope for PCI-DSS. Some merchant-facing traffic may be briefly affected during the rule reload. Changes are managed in the network IaC repository. Checkout, order service, refunds batch and the merchant portal all route through this gateway.

Bumping the database connection pool on the order service from 40 to 80 ahead of expected Q4 volume. One-line change in the service config, picked up on the next pod restart. Rolling restart across the three replicas. Config lives in the platform repo.

Rolling out Analytics Ingestion Service v3.0 to production for the Q4 launch. **Code**: PR #4821 approved by 2 engineers, all coding standards checks green, no direct commits to main. **Tests**: Full regression suite passing (2,400+ unit tests, 180 integration tests). Load tested at 3× peak traffic in staging for 48 hours; zero regressions. **Security**: PCI-DSS scoping unchanged. API keys rotated via HSM. Semgrep + Snyk scans returned no HIGH/CRITICAL findings. External penetration test signed off by SecOps on 2026-07-10. **Infra**: Deploys into existing analytics-prod namespace, no new nodes needed. Autoscaler headroom checked. **Back-out**: See back-out plan below — Argo abort, <60s RTO. **Hardware**: GPU node compatibility verified — CUDA 12.4 driver already installed; no NVIDIA driver change needed. **Data**: DB migration is additive-only (2 nullable columns), verified on a staging clone of prod data. No destructive changes, no PII touched. **Connectivity**: TLS cert already rotated 2026-07-09 (valid 90 days). DNS unchanged. Load-balancer health check thresholds unchanged. **Downtime**: Zero planned downtime — progressive blue-green rollout via Argo Rollouts. Canary at 5% for 30 min; if clean, promote. **Sign-off**: UAT completed with Analytics + Reporting teams on 2026-07-12. Change reviewed by Analytics Platform Director.