Repository navigation
security: drop the EU West-1 control plane and say only EU Central is in the EU - #1944
Draft
unionai-docsy-agent[bot] wants to merge 1 commit into
Draft
unionai-docsy-agent[bot] wants to merge 1 commit into
unionai-docsy-agent[bot] wants to merge 1 commit into
Conversation
… in the EU Drafted by Docsy for case 1739. Signed-off-by: unionai-docsy-agent[bot] <336110417+unionai-docsy-agent[bot]@users.noreply.github.com>
GHA build & deploy previewBuilt by
Updated automatically on every push. |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed in the product
Union no longer offers eu-west-1 (Ireland) as a control plane region when an organization signs up. The signup regions are us-east-2, us-west-2, eu-west-2 (London) and eu-central-1 (Frankfurt). The GDPR page still listed EU West-1 in three places, and so did the data residency section of the data classification page. Both pages also counted EU West-2 as an EU region. London is in the United Kingdom, which is outside the EU.
Signals 1739, 1740 and 1741 (a page audit of
security/compliance/gdpr.md) asked for this fix.Changes
content/security/compliance/gdpr.md:content/security/data-protection/classification-and-residency.md(verification step 1 of the GDPR page links here):Evidence (unionai/cloud at
a1dbfa9c)idl/signup/payload.proto:enum Regionhasreserved 3;with the comment "3 was REGION_EU_WEST_1". The remaining values areREGION_US_EAST_2,REGION_US_WEST_2,REGION_EU_WEST_2andREGION_EU_CENTRAL_1. The removal landed in #17568 (2026-08-17).clients-signup/src/app/api/create-organization/route.ts: the only EU regions it maps areeu-central-1andeu-west-2.values-production-<region>.yamlfiles exist only forus-east-2,us-west-2,eu-west-2andeu-central-1.alerts/status-page/betterstack.yaml: the only EU production endpoints it monitors are eu-central-1 and eu-west-2.security/architecture/network.mdhas rows foreu-west-2andeu-central-1and none foreu-west-1.deployment/byoc/data-plane-setup-on-aws.mdhas aneu-west-2Launch Stack row, so a London data plane is possible.Not settled: the repository still has eu-west-1 production config.
deploy/tenant/prod/values-eu-west-1-overrides.yamlwas last changed in #14922 (2026-03, "migrate prod eu-west-1 to lite").hooks/deploy/hooks.yamlandenvoy-gateway/deploy/alert_rules.yamlalso mention eu-west-1. The source doesn't show whether organizations are still served from eu-west-1. That's why the GDPR page states the European regions as signup placement and doesn't claim that no eu-west-1 control plane exists.Not changed
content/deployment/byoc/data-plane-setup-on-aws.mdhas aneu-west-1Launch Stack row. That row is for the data plane, which this evidence doesn't cover, so it stays.Open questions
Pre-flight review
Docsy's reviewer read this draft before it was opened and found 4 problems to fix. The draft was amended twice for them, and a check of the amendment found nothing left to fix.
Its optional suggestions, which the page doesn't need to be right; take them or not:
content/security/compliance/gdpr.mdline 27: Step 2 asks the reviewer to confirm the endpoint's region but doesn't say how.security/architecture/network.mdlists the control plane load balancer hostnames and IPs for each region, includingeu-central-1. Point to that table so the reviewer can match their organization's endpoint against it.Docsy case 1739: https://docsy.apps.demo.hosted.unionai.cloud/cases/1739
Drafted by Docsy, Union.ai's documentation agent, from a false statement its page audit found. Review it like any PR; close it if it's not wanted.