Phase 7a: Remove update-deployment-tag CI step

forgejo_admin commented

2026-03-14 23:35:38 +00:00

Owner

Lineage

plan-pal-e-platform → Phase 7 (Kustomize) → Phase 7a (Base + pal-e-docs migration)

Repo

forgejo_admin/pal-e-docs

User Story

As a platform operator
I want the CI pipeline to stop sed-updating k8s manifests after each build
So that Image Updater handles deployment tags via kustomization write-back to pal-e-deployments

Context

With ArgoCD pointing at pal-e-deployments overlays and Image Updater configured for kustomization write-back, the update-deployment-tag CI step is no longer needed. It currently uses sed to update image tags in k8s/deployment.yaml and k8s/embedding-worker.yaml, then commits with [skip ci]. This is replaced by Image Updater automatically updating the kustomization.yaml images field in pal-e-deployments. The path excludes for k8s files (which prevented CI loops) are also no longer needed.

File Targets

Files to modify:

.woodpecker.yaml -- remove update-deployment-tag step, remove path excludes for k8s files

Files to delete:

k8s/.argocd-source-pal-e-docs.yaml -- stale, Image Updater writes to pal-e-deployments now

Files NOT to touch:

k8s/deployment.yaml -- keep as documentation/fallback
k8s/embedding-worker.yaml -- keep as documentation/fallback
k8s/service.yaml, k8s/servicemonitor.yaml, k8s/kustomization.yaml -- keep as fallback

Acceptance Criteria

update-deployment-tag step removed from .woodpecker.yaml
Path excludes for k8s files removed from trigger
k8s/.argocd-source-pal-e-docs.yaml deleted
Remaining steps (test, migration-test, build-and-push, smoke-test) unchanged
No more [skip ci] commits generated by CI

Test Expectations

CI pipeline passes on PR (test + migration-test steps)
YAML syntax valid
Run command: python -c "import yaml; yaml.safe_load(open('.woodpecker.yaml'))"

Constraints

Do NOT delete k8s/ directory -- retained as fallback until Phase 7d
Do NOT modify test, migration-test, build-and-push, or smoke-test steps
This PR should be merged LAST (after pal-e-deployments and pal-e-services terraform are applied)

Checklist

PR opened
Tests pass
No unrelated changes

plan-pal-e-platform -- Platform Hardening plan
pal-e-platform -- project

### Lineage `plan-pal-e-platform` → Phase 7 (Kustomize) → Phase 7a (Base + pal-e-docs migration) ### Repo `forgejo_admin/pal-e-docs` ### User Story As a platform operator I want the CI pipeline to stop sed-updating k8s manifests after each build So that Image Updater handles deployment tags via kustomization write-back to pal-e-deployments ### Context With ArgoCD pointing at pal-e-deployments overlays and Image Updater configured for kustomization write-back, the `update-deployment-tag` CI step is no longer needed. It currently uses `sed` to update image tags in k8s/deployment.yaml and k8s/embedding-worker.yaml, then commits with `[skip ci]`. This is replaced by Image Updater automatically updating the kustomization.yaml images field in pal-e-deployments. The path excludes for k8s files (which prevented CI loops) are also no longer needed. ### File Targets Files to modify: - `.woodpecker.yaml` -- remove `update-deployment-tag` step, remove path excludes for k8s files Files to delete: - `k8s/.argocd-source-pal-e-docs.yaml` -- stale, Image Updater writes to pal-e-deployments now Files NOT to touch: - `k8s/deployment.yaml` -- keep as documentation/fallback - `k8s/embedding-worker.yaml` -- keep as documentation/fallback - `k8s/service.yaml`, `k8s/servicemonitor.yaml`, `k8s/kustomization.yaml` -- keep as fallback ### Acceptance Criteria - [ ] `update-deployment-tag` step removed from .woodpecker.yaml - [ ] Path excludes for k8s files removed from trigger - [ ] k8s/.argocd-source-pal-e-docs.yaml deleted - [ ] Remaining steps (test, migration-test, build-and-push, smoke-test) unchanged - [ ] No more `[skip ci]` commits generated by CI ### Test Expectations - [ ] CI pipeline passes on PR (test + migration-test steps) - [ ] YAML syntax valid - Run command: `python -c "import yaml; yaml.safe_load(open('.woodpecker.yaml'))"` ### Constraints - Do NOT delete k8s/ directory -- retained as fallback until Phase 7d - Do NOT modify test, migration-test, build-and-push, or smoke-test steps - This PR should be merged LAST (after pal-e-deployments and pal-e-services terraform are applied) ### Checklist - [ ] PR opened - [ ] Tests pass - [ ] No unrelated changes ### Related - `plan-pal-e-platform` -- Platform Hardening plan - `pal-e-platform` -- project