ci: auto-update infra image tags after Docker push #70

Merged
ghost merged 1 commits from ci/auto-deploy-infra into main 2026-03-19 20:18:05 +00:00
ghost commented 2026-03-19 20:09:39 +00:00 (Migrated from github.com)

Summary

  • Adds a deploy job to CI that runs after Docker images are pushed to GHCR
  • Checks out groombook/infra, updates all image SHA tags in K8s manifests, and commits to main
  • Ensures Flux picks up new deployments automatically after every successful build
  • Prevents the issue where :latest tags caused no manifest diff and pods weren't restarted

Requires: INFRA_DEPLOY_TOKEN secret to be configured with push access to groombook/infra repo.

Test plan

  • Verify CI passes (the deploy job will be skipped on PRs, only runs on main)
  • After merge, verify next main push triggers the deploy job
  • Verify infra repo gets a commit with updated SHA tags
  • Verify Flux reconciles and pods restart with new images

🤖 Generated with Claude Code

## Summary - Adds a `deploy` job to CI that runs after Docker images are pushed to GHCR - Checks out `groombook/infra`, updates all image SHA tags in K8s manifests, and commits to main - Ensures Flux picks up new deployments automatically after every successful build - Prevents the issue where `:latest` tags caused no manifest diff and pods weren't restarted **Requires:** `INFRA_DEPLOY_TOKEN` secret to be configured with push access to `groombook/infra` repo. ## Test plan - [ ] Verify CI passes (the deploy job will be skipped on PRs, only runs on main) - [ ] After merge, verify next main push triggers the deploy job - [ ] Verify infra repo gets a commit with updated SHA tags - [ ] Verify Flux reconciles and pods restart with new images 🤖 Generated with [Claude Code](https://claude.com/claude-code)
This repo is archived. You cannot comment on pull requests.