fix(ci): staging runs on deploy-affecting changes; promotion PR names the staged commit #82

Merged

jfraeys merged 1 commit from jfraeys/fix/staging-trigger-paths into main 2026-10-12 23:01:21 -04:00

Conversation 0 Commits 1 Files changed 2 +26 -3

jfraeys commented 2026-10-12 22:32:19 -04:00

Owner

Copy link

staging-validate's push paths covered only terraform, cloud-init, validate-hardening.yml and staging.sh, so role/playbook/inventory/firewall/secrets changes (#75, #78) never triggered it and the main->prod PR could claim 'staging passed' for code staging never ran.

• Add roles/, playbooks/, inventory/, ansible.cfg, scripts/lib/, secrets/staging.sops.yml, .forgejo/ci-secrets.yml and the workflow itself to the push paths. Concurrency group (cancel-in-progress: false) still serializes runs.
• The promotion PR body now states the commit staging validated. promote does not fail when main moves on (queued runs would race it); scripts/plan-prod.sh warns when origin/main differs from the staged commit, and merging stays manual.

This PR touches the workflow file, so merging it triggers a staging run, which verifies the new trigger.

Plan: L2 of the loose-ends track.

🤖 Generated with Claude Code

staging-validate's push paths covered only terraform, cloud-init, validate-hardening.yml and staging.sh, so role/playbook/inventory/firewall/secrets changes (#75, #78) never triggered it and the main->prod PR could claim 'staging passed' for code staging never ran. - Add roles/**, playbooks/**, inventory/**, ansible.cfg, scripts/lib/**, secrets/staging.sops.yml, .forgejo/ci-secrets.yml and the workflow itself to the push paths. Concurrency group (cancel-in-progress: false) still serializes runs. - The promotion PR body now states the commit staging validated. promote does not fail when main moves on (queued runs would race it); scripts/plan-prod.sh warns when origin/main differs from the staged commit, and merging stays manual. This PR touches the workflow file, so merging it triggers a staging run, which verifies the new trigger. Plan: L2 of the loose-ends track. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

jfraeys added 1 commit 2026-10-12 22:32:19 -04:00

fix(ci): staging runs on role/playbook/inventory changes; promotion PR names the staged commit ... 471fe0fff2

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit 53dd78dc27 into main 2026-10-12 23:01:21 -04:00

jfraeys referenced this pull request from a commit 2026-10-12 23:01:22 -04:00

Merge pull request 'fix(ci): staging runs on deploy-affecting changes; promotion PR names the staged commit' (#82) from jfraeys/fix/staging-trigger-paths into main

jfraeys referenced this pull request 2026-10-13 10:55:31 -04:00

feat(deploy): production gate tied to the promotion PR (replaces the staging marker files) #96

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

jfraeys/infra!82

No description provided.