promote-to-prod
Installation
SKILL.md
Promote duckgres to prod
Prod promotion is manual by policy: state/duckgres.yaml in PostHog/charts
has require_prod_approval: true, so the ONLY path to prod is the charts
repo's promote-to-prod.yml workflow, gated by required reviewers on the
prod-promote-<team> GitHub environment. The result posts to
#alerts-managed-warehouse.
How images reach the state file (no action needed)
Merge to duckgres main → container-image-cd.yml builds per-arch images +
a multi-arch manifest, then repo-dispatches commit_state_update to
PostHog/charts → the deploy bot writes state.duckgres.image.sha and
auto-promotes image.dev (mw-dev rolls immediately). The promotable ref is
the MULTI-ARCH MANIFEST digest in the state file — never a per-arch digest,
and never the .dockerbuild artifacts on the CD run (those are build
provenance).