Deployment

Move an integration from development to production safely.

Use separate Northstar projects, tokens, and webhook endpoints for development and production.

Production checklist

Store API tokens in a managed secret store
Restrict tokens to the minimum required scopes
Set explicit HTTP timeouts
Retry only transient failures
Attach idempotency keys to mutating requests
Verify every webhook signature
Monitor error rate and rate-limit capacity
Record request identifiers in structured logs

Environment configuration

text

NORTHSTAR_TOKEN=managed-by-your-secret-store
NORTHSTAR_BASE_URL=https://api.northstar.example/v1
NORTHSTAR_TIMEOUT=10000

Do not use test tokens in production. Rotate credentials during deployment without downtime by accepting both old and new tokens briefly, then revoke the old token.

Health checks

Your application health check should verify local configuration without making an API request on every probe. Use a scheduled background check to validate Northstar connectivity and alert on sustained failures.

Rollback strategy

Keep integration changes backward compatible across a deployment. If a release fails, roll back application code first; avoid deleting Northstar resources as part of an automated rollback.

After deployment, run a low-impact request and confirm webhook delivery before increasing traffic.

Error handling

FAQ