Skip to content

PROD runbook

Operator checklist for shipping application repos under ADR-0007 (Option A).

Companions: Release strategy · Deployment · Rollback

Preconditions

  • Intended changes are on develop (CI green)
  • Release owner identified; version x.y.z agreed
  • No open blockers on the ship set

Cut release

git fetch origin
git checkout develop && git pull origin develop
git checkout -b release/x.y.z
git push -u origin release/x.y.z

Freeze: only release fixes / cherry-picks on this branch.

Deploy PROD (manual)

  1. Run the repo deploy workflow (workflow_dispatch) targeting prod.
  2. Ref must be release/x.y.z (never feature/*).
  3. Set explicit confirm (confirm_prod=deploy or equivalent).
  4. Prefer immutable image tags (sha-<git>, optional build-<run>).

Until F.1/F.4 land, follow the repo’s current AWS/Amplify console steps but still use the release/* git SHA as the artifact identity.

Validate

  • Smoke critical paths (auth, booking/list, payment as applicable)
  • Check error/rate dashboards for the deploy window
  • Note the git SHA that is live

Promote to main + tag

  1. Open PR: release/x.y.z → main (merge-guard allows only release/*).
  2. Merge after checks.
  3. Confirm Actions job Release tag on main created vX.Y.Z + GitHub Release on the merge SHA (idempotent if re-run).
  4. If this was a hotfix from main, back-merge into develop.

Abort / rollback

If PROD validation fails before promoting to main:

  1. Do not merge release/* → main.
  2. Follow rollback-strategy.md (prior task definition / Amplify previous job / revert release commit as needed).
  3. Fix forward on release/* or abandon the cut and restart from develop.
Item Status intent
F.1 #52 Disable push-triggered pipeline
F.4 #58 workflow_dispatch guards
F.5 #59 Auto tag + Release — reusable workflow
F.6 #60 ADR-0007 + guards