Retarget feature-branch deploy workflow at credreg-test#1028
Merged
Conversation
The staging environment was renamed to credreg-test and moved to the cer-api-prod EKS cluster. Update deploy-feature-to-staging.yaml to point at the new cluster/namespace and add the matching db-migrate-job manifest (with test node selector, toleration, and priority class) so the migration step actually schedules.
edgarf
approved these changes
Apr 24, 2026
excelsior
pushed a commit
that referenced
this pull request
May 18, 2026
## Summary - The staging env was renamed to `credreg-test` and moved to the `cer-api-prod` EKS cluster. `deploy-feature-to-staging.yaml` was still targeting `ce-registry-eks` / `credreg-staging`, so the DB-migration step timed out (run [24905871968](https://github.com/CredentialEngine/CredentialRegistry/actions/runs/24905871968)). - Point the workflow at `cer-api-prod` / `credreg-test`, switch the Slack `ENVIRONMENT` label to `test`. - Add `terraform/environments/eks/k8s-manifests-test/db-migrate-job.yaml` (copy of the version in the `ce-registry` repo) so the migration job schedules on the test node group (`nodeSelector env=test`, toleration, `priorityClassName: test-normal`). ## Test plan - [ ] Trigger `Deploy feature branch to staging environment` via workflow_dispatch on a test branch - [ ] Verify `set image` + `rollout status` succeed against `deploy/main-app` and `deploy/worker-app` in `credreg-test` - [ ] Verify the `db-migrate-*` Job in `credreg-test` schedules on a test node, runs `rake db:create db:migrate`, and reaches `Complete` - [ ] Confirm Slack notification shows `env: test` ## Notes - Assumes the `github-oidc-widget` IAM role already has an EKS access entry on `cer-api-prod`. If the `aws eks update-kubeconfig` / first kubectl call fails with an auth error, add the access entry. - The migration manifest now lives in both repos (`CredentialRegistry` and `ce-registry/infra`). Worth consolidating later. Co-authored-by: Ariel Rolfo <arielr-lt+username@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
credreg-testand moved to thecer-api-prodEKS cluster.deploy-feature-to-staging.yamlwas still targetingce-registry-eks/credreg-staging, so the DB-migration step timed out (run 24905871968).cer-api-prod/credreg-test, switch the SlackENVIRONMENTlabel totest.terraform/environments/eks/k8s-manifests-test/db-migrate-job.yaml(copy of the version in thece-registryrepo) so the migration job schedules on the test node group (nodeSelector env=test, toleration,priorityClassName: test-normal).Test plan
Deploy feature branch to staging environmentvia workflow_dispatch on a test branchset image+rollout statussucceed againstdeploy/main-appanddeploy/worker-appincredreg-testdb-migrate-*Job incredreg-testschedules on a test node, runsrake db:create db:migrate, and reachesCompleteenv: testNotes
github-oidc-widgetIAM role already has an EKS access entry oncer-api-prod. If theaws eks update-kubeconfig/ first kubectl call fails with an auth error, add the access entry.CredentialRegistryandce-registry/infra). Worth consolidating later.