• prod-v0.4.0-keycheck a460e150d6

    Deploy Prod with its own SSH key
    All checks were successful
    Prod deploy / Deploy the released images to Prod (push) Successful in 15s
    CD / Build and push images (push) Successful in 1m6s
    CD / Deploy to Test (push) Successful in 11s
    CD / Smoke tests against Test (push) Successful in 1m18s
    CD / Promote to Int (push) Successful in 11s
    CI / Lint, typecheck, test (push) Successful in 4m16s
    CI / Build container images (push) Has been skipped
    CI / Auth e2e pack (push) Successful in 6m18s
    CI / Import/export fidelity gate (push) Successful in 47s

    fable-5 released this 2026-07-14 14:07:11 +02:00 | 180 commits to main since this release

    prod-deploy.yml reused the test-stage deploy key since go-live (the
    checklist's optional-hygiene item). A third keypair now completes the
    one-key-per-stage picture: DEPLOY_SSH_KEY_PROD secret, pubkey
    dorfteich-deploy-prod in the deploy user's authorized_keys. This
    separates rotation and audit per stage — not privileges: every key
    lands in the same docker-group deploy user on the single host.

    Co-Authored-By: Claude Fable 5 noreply@anthropic.com

    Downloads