file-share/.github/workflows/deploy.yaml
Adam Moussa ee3b28b5b5
ci(deploy): freeze CDK pushes to main (PLAT-77) (#55)
* ci(deploy): freeze CDK pushes to main (PLAT-77)

HCP Terraform is the deploy path for the prod move. A push to main must not replace the management-account instance.

* ci(deploy): keep the v1.0.19 CDK workflow pin (PLAT-77)

The freeze should drop the push trigger only. The reusable workflow SHA stays on the version already on main.
2026-09-29 22:31:37 +00:00

22 lines
581 B
YAML

name: Deploy
# PLAT-77: push-to-main CDK deploy is frozen so HCP Terraform is the only
# path that can change this stack. workflow_dispatch stays for an explicit
# rollback of the management-account stack.
on:
workflow_dispatch:
permissions:
id-token: write
contents: read
concurrency:
group: deploy
cancel-in-progress: false
jobs:
deploy:
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@0a1010e63248c9ca9f042c870eb2c579ba6b9455 # v1.0.19
with:
node-version: "24"
secrets:
deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}