Skip to content

release: consolidate keeperhub pipeline into one atomic helm release#1586

Merged
OleksandrUA merged 2 commits into
prodfrom
staging
Jun 18, 2026
Merged

release: consolidate keeperhub pipeline into one atomic helm release#1586
OleksandrUA merged 2 commits into
prodfrom
staging

Conversation

@OleksandrUA

Copy link
Copy Markdown

What

Promote the pipeline consolidation from staging to prod: the execution pipeline (app, executor, schedule, block, metrics-collector) deploys as one atomic keeperhub-stack release instead of five separate releases. Merged to staging in #1585 and validated there (all five roll together in a single atomic helm upgrade).

This promotion contains only the consolidation - staging is 2 commits ahead of prod.

Rollout - prod is a one-time cutover

Prod's five existing releases must be adopted into the single release once, before the new atomic deploy can take over. Do not treat this PR's auto-deploy as the cutover.

Recommended: merge with [skip deploy] in the merge commit message. The prod pipeline then builds the uniform image set (needed for the cutover) but skips the deploy, leaving the keeperhub release clean for the one-time adoption step. If [skip deploy] is omitted, the auto-deploy fails on Helm ownership and --atomic rolls it straight back (prod unchanged) - the manual cutover then proceeds the same way.

The one-time adoption runs from the infra runbook in a low-traffic window. After it, normal prod promotions deploy the whole stack atomically.

Deploy the execution pipeline (app, executor, schedule, block,
metrics-collector) as a single keeperhub-stack umbrella release instead of
five independently-triggered releases, removing the staggered-rollover window
that left in-flight executions orphaned mid-deploy.

- deploy/keeperhub-stack/{staging,prod}/values.yaml: each component nested
  under its alias with nameOverride/fullnameOverride so every resource keeps
  its current name (transparent to event-tracker, CI health check, runbooks)
- docker-bake.hcl: add a pipeline group so the shared builder stage builds
  once instead of each deploy workflow rebuilding it independently
- build-images.yml: build the whole pipeline group in one bake session; add
  workflow_dispatch for manual build-only runs
- deploy-keeperhub.yaml: deploy techops-services/keeperhub-stack atomically
- ci-pipeline.yml: single deploy job replaces the parallel app/executor jobs
- remove deploy-executor / deploy-scheduler / deploy-metrics-collector
  (their build folds into build-images, their deploy into the atomic stack)

Refs KEEP-825
…b-deploys-atomic-helm

ci: consolidate keeperhub pipeline into one atomic helm release
@OleksandrUA OleksandrUA merged commit 2d6955b into prod Jun 18, 2026
25 of 26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant