maintainx-prod-checklist

# MaintainX Production Checklist ## Overview Comprehensive pre-deployment and post-deployment checklist for MaintainX integrations covering security, reliability, observability, and data integrity. ## Prerequisites - MaintainX integration developed and tested - Production MaintainX account with API access - Deployment infrastructure ready (Cloud Run, K8s, or similar) ## Instructions ### Step 1: Authentication & Security ```bash # Verify production API key works curl -s -o /dev/null -w "HTTP %{http_code}" \ https://api.getmaintainx.com/v1/users?limit=1 \ -H "Authorization: Bearer $MAINTAINX_API_KEY_PROD" # Verify no secrets in codebase npx gitleaks detect --source . --no-git ``` - [ ] API key stored in secret manager (not env file or code) - [ ] `.env` and `*.key` files in `.gitignore` - [ ] Pre-commit hook blocking secret commits - [ ] API key rotation schedule set (every 90 days) - [ ] Input validation on all user-provided data (Zod or similar) ### Step 2: Error Handling & Resilience - [ ] Retry logic with exponential backoff for 429 and 5xx errors - [ ] `Retry-After` header honored on 429 responses - [ ] Circuit breaker for cascading failure prevention - [ ] Graceful degradation when MaintainX API is down - [ ] Request timeout set (30 seconds recommended) ```typescript // Verify retry logic is configured const client = axios.create({ baseURL: 'https://api.getmaintainx.com/v1', timeout: 30_000, // 30 second timeout headers: { Authorization: `Bearer ${api...