ci(deploy): freeze CDK pushes to main (PLAT-77)

HCP Terraform is the deploy path for the prod move. A push to main must not replace the management-account instance.
This commit is contained in:
Adam Moussa 2026-09-28 16:30:24 -04:00
parent e4f156bb98
commit abb749dcb0
No known key found for this signature in database

View file

@ -1,7 +1,9 @@
name: Deploy
# PLAT-77: push-to-main CDK deploy is frozen so HCP Terraform is the only
# path that can change this stack. workflow_dispatch stays for an explicit
# rollback of the management-account stack.
on:
push:
branches: [main]
workflow_dispatch:
permissions:
id-token: write
@ -13,7 +15,7 @@ concurrency:
jobs:
deploy:
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@0a1010e63248c9ca9f042c870eb2c579ba6b9455 # v1.0.19
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
with:
node-version: "24"
secrets: