Skip to content

feat: deploy Cloudflare production from master #134

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
HazAT wants to merge 1 commit into from
Closed

feat: deploy Cloudflare production from master #134

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 6 additions & 8 deletions .github/workflows/deploy.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,12 +1,10 @@
name: Deploy Cloudflare environment
name: Deploy Cloudflare production

on:
push:
branches:
- master
workflow_dispatch:
inputs:
confirm:
description: Type deploy-hackweek after operator review
required: true
type: string

permissions:
contents: read
Expand All @@ -17,11 +15,11 @@ concurrency:

jobs:
verify:
if: inputs.confirm == 'deploy-hackweek'
if: github.ref == 'refs/heads/master'
uses: ./.github/workflows/test.yml

deploy:
name: Deploy reviewed configuration
name: Deploy production
needs: verify
runs-on: ubuntu-latest
environment: hackweek-cloudflare
Expand Down
11 changes: 11 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,17 @@ Hackweek is an internal React + TypeScript application served by one Hono Cloudf
- Node.js 24.11 or newer (Volta and CI pin 24.19)
- npm 11 or newer

## Deployment

Every push to `master` runs the full verification suite, applies pending D1 migrations, and deploys the Worker and static assets to Cloudflare production through [`.github/workflows/deploy.yml`](.github/workflows/deploy.yml). The workflow can also be retried manually from `master`; other refs cannot deploy production.

The workflow requires these GitHub Actions secrets:

- `CLOUDFLARE_ACCOUNT_ID`: the Sentry Production Cloudflare account ID.
- `CLOUDFLARE_API_TOKEN`: an account-scoped token with **Edit Cloudflare Workers** and **D1 Edit** permissions.

Production deploys use [`wrangler.production.json`](wrangler.production.json) and the `hackweek-cloudflare` GitHub environment. Do not add Cloudflare credentials to the repository.

## Deterministic local start

```bash
Expand Down
Loading