Document final cpflow PR pin

Author: justin808

.controlplane/readme.md

@@ -504,7 +504,10 @@ The GitHub settings and Control Plane resources must match the app names in
 `REVIEW_APP_PREFIX` unset and let the workflow infer
 `qa-react-webpack-rails-tutorial`; generated review apps are named
 `qa-react-webpack-rails-tutorial-<PR number>`.
-If you have older review apps from the previous `qa-react-webpack-rails-tutorial-pr-<PR number>` naming, delete them manually after this flow lands; cleanup targets the current prefix convention. To inventory old apps, run:
+If you have older review apps from the previous
+`qa-react-webpack-rails-tutorial-pr-<PR number>` naming, delete them manually
+after this flow lands; cleanup targets the current prefix convention. To
+inventory old apps, run:
 
 ```sh
 cpln gvc query --org shakacode-open-source-examples-staging -o yaml --prop name~qa-react-webpack-rails-tutorial-pr-

.controlplane/shakacode-team.md

@@ -77,6 +77,11 @@ Optional repository settings:
 - `HEALTH_CHECK_RETRIES` / `HEALTH_CHECK_INTERVAL`: production health polling controls; defaults to `24` retries and `15` seconds.
 - `ROLLBACK_READINESS_RETRIES` / `ROLLBACK_READINESS_INTERVAL`: post-rollback health polling controls; defaults to `24` retries and `15` seconds.
 
+Current workflow wrappers are pinned to upstream `control-plane-flow` PR #318 at
+`f3f410ebe622fd60af09b8bdf6eca4617685c64a` for downstream testing. After that
+upstream work is released, regenerate or repin the wrappers to the release tag
+instead of keeping this PR commit SHA long term.
+
 If staging moves off `master`, update both `STAGING_APP_BRANCH` and the branch
 filter in `.github/workflows/cpflow-deploy-staging.yml`.
 

.github/workflows/cpflow-cleanup-stale-review-apps.yml

@@ -12,8 +12,8 @@ jobs:
   cleanup:
     # Cleanup targets qa-react-webpack-rails-tutorial-<PR>. Manually delete any
     # legacy qa-react-webpack-rails-tutorial-pr-<PR> apps during migration.
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-cleanup-stale-review-apps.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-cleanup-stale-review-apps.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}

.github/workflows/cpflow-delete-review-app.yml

@@ -26,8 +26,8 @@ jobs:
        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) ||
       (github.event_name == 'pull_request_target' && github.event.action == 'closed') ||
       github.event_name == 'workflow_dispatch'
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-delete-review-app.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-delete-review-app.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}

.github/workflows/cpflow-deploy-review-app.yml

@@ -30,9 +30,9 @@ jobs:
        github.event.issue.pull_request &&
        contains(fromJson('["+review-app-deploy","+review-app-deploy\n","+review-app-deploy\r\n"]'), github.event.comment.body) &&
        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association))
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-review-app.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-review-app.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}
       DOCKER_BUILD_SSH_KEY: ${{ secrets.DOCKER_BUILD_SSH_KEY }}

.github/workflows/cpflow-deploy-staging.yml

@@ -16,9 +16,9 @@ permissions:
 
 jobs:
   deploy-staging:
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-staging.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-deploy-staging.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a
       staging_app_branch_default: ""
     secrets:
       CPLN_TOKEN_STAGING: ${{ secrets.CPLN_TOKEN_STAGING }}

.github/workflows/cpflow-help-command.yml

@@ -23,6 +23,6 @@ jobs:
        contains(fromJson('["+review-app-help","+review-app-help\n","+review-app-help\r\n"]'), github.event.comment.body) &&
        contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) ||
       github.event_name == 'workflow_dispatch'
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-help-command.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-help-command.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a

.github/workflows/cpflow-promote-staging-to-production.yml

@@ -18,9 +18,9 @@ jobs:
     if: github.event.inputs.confirm_promotion == 'promote'
     # Keep the @ref in `uses:` and `control_plane_flow_ref` below in sync: the
     # first selects the reusable workflow, the second selects its shared actions.
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-promote-staging-to-production.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-promote-staging-to-production.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a
       # Keep CPLN_TOKEN_PRODUCTION as a secret on this protected GitHub
       # Environment. The caller passes the environment name, the upstream
       # reusable workflow runs its production job in that environment, and

.github/workflows/cpflow-review-app-help.yml

@@ -14,6 +14,9 @@ permissions:
 
 jobs:
   show-help:
-    uses: shakacode/control-plane-flow/.github/workflows/cpflow-review-app-help.yml@1d82a6dc510745c3fe9b40b01ea348875a4f1923
+    # This is intentionally unconditional: adding this wrapper opts the repo in
+    # to PR-open help. Remove the wrapper or add a repo-specific `if:` guard if
+    # review apps should not be advertised before Control Plane is configured.
+    uses: shakacode/control-plane-flow/.github/workflows/cpflow-review-app-help.yml@f3f410ebe622fd60af09b8bdf6eca4617685c64a
     with:
-      control_plane_flow_ref: 1d82a6dc510745c3fe9b40b01ea348875a4f1923
+      control_plane_flow_ref: f3f410ebe622fd60af09b8bdf6eca4617685c64a