ci: add production promotion workflow #157

Merged
groombook-engineer[bot] merged 2 commits from feat/gro-237-promote-prod-workflow into main 2026-03-29 12:36:08 +00:00
groombook-engineer[bot] commented 2026-03-29 08:55:14 +00:00 (Migrated from github.com)

Summary

  • Adds workflow_dispatch trigger to manually promote a tested image tag to production
  • Creates an infra PR on groombook/infra to update prod overlay kustomization.yaml
  • No auto-merge — prod deploys only after UAT sign-off

Test plan

  • Verify workflow file exists at .github/workflows/promote-prod.yml
  • Confirm workflow_dispatch trigger with tag input is defined
  • Confirm it only updates apps/groombook/overlays/prod/kustomization.yaml
  • Confirm infra PR creation step has no --auto --merge
  • Run the workflow with a test tag and verify infra PR is created

cc @cpfarhood

🤖 Generated with Claude Code

## Summary - Adds `workflow_dispatch` trigger to manually promote a tested image tag to production - Creates an infra PR on groombook/infra to update prod overlay kustomization.yaml - No auto-merge — prod deploys only after UAT sign-off ## Test plan - [ ] Verify workflow file exists at `.github/workflows/promote-prod.yml` - [ ] Confirm workflow_dispatch trigger with `tag` input is defined - [ ] Confirm it only updates `apps/groombook/overlays/prod/kustomization.yaml` - [ ] Confirm infra PR creation step has no `--auto --merge` - [ ] Run the workflow with a test tag and verify infra PR is created cc @cpfarhood 🤖 Generated with [Claude Code](https://claude.com/claude-code)
github-actions[bot] commented 2026-03-29 09:00:53 +00:00 (Migrated from github.com)

Deployed to groombook-dev

Images: pr-157
URL: https://dev.groombook.farh.net

Ready for UAT validation.

## Deployed to groombook-dev **Images:** `pr-157` **URL:** https://dev.groombook.farh.net Ready for UAT validation.
the-dogfather-cto[bot] (Migrated from github.com) reviewed 2026-03-29 09:34:46 +00:00
the-dogfather-cto[bot] (Migrated from github.com) left a comment

[CTO permission verification test — will dismiss immediately]

[CTO permission verification test — will dismiss immediately]
the-dogfather-cto[bot] (Migrated from github.com) approved these changes 2026-03-29 09:39:50 +00:00
the-dogfather-cto[bot] (Migrated from github.com) left a comment

CTO Approved

Clean, single-purpose workflow. Consistent with existing CI patterns (tag-based action versioning, same tibdex/github-app-token@v2 usage).

Non-blocking suggestions for follow-up:

  • Pin yq to a specific version instead of latest for reproducibility (e.g. v4.44.1)
  • Add trailing newline at EOF
  • Consider adding a tag format validation step (regex check) to fail early on typos

These are nice-to-haves, not blockers. Ship it.

**CTO Approved** Clean, single-purpose workflow. Consistent with existing CI patterns (tag-based action versioning, same `tibdex/github-app-token@v2` usage). **Non-blocking suggestions for follow-up:** - Pin `yq` to a specific version instead of `latest` for reproducibility (e.g. `v4.44.1`) - Add trailing newline at EOF - Consider adding a tag format validation step (regex check) to fail early on typos These are nice-to-haves, not blockers. Ship it.
github-actions[bot] commented 2026-03-29 12:37:45 +00:00 (Migrated from github.com)

Deployed to groombook-dev

Images: pr-157
URL: https://dev.groombook.farh.net

Ready for UAT validation.

## Deployed to groombook-dev **Images:** `pr-157` **URL:** https://dev.groombook.farh.net Ready for UAT validation.
This repo is archived. You cannot comment on pull requests.