Skip to content

feat(integ-runner): add --update-from-tags for sequential tag deployment#1595

Merged
aws-cdk-automation merged 3 commits into
mainfrom
otaviom/integ-runner-update-from-tags
Jun 4, 2026
Merged

feat(integ-runner): add --update-from-tags for sequential tag deployment#1595
aws-cdk-automation merged 3 commits into
mainfrom
otaviom/integ-runner-update-from-tags

Conversation

@otaviomacedo
Copy link
Copy Markdown
Contributor

@otaviomacedo otaviomacedo commented Jun 4, 2026

Summary

  • Adds --update-from-tags <tag1>,<tag2>,... CLI option to integ-runner that deploys snapshots from specified git tags in sequence before deploying the current code
  • Enables on-call engineers to verify that a fix is safe for customers currently on a broken version (e.g., --update-from-tags v2.150.0,v2.151.0 proves the upgrade path N → N+1 → fix is safe)
  • Fixes a pre-existing bug where --allow-delete-failures was not passed across the worker pool boundary

Behavior

  • Implies --force (all matched tests deploy regardless of snapshot diff)
  • Replaces the normal merge-base update workflow when provided
  • Fails fast if a snapshot does not exist at any specified tag
  • allowDestroy checks apply at every transition
  • Incompatible with --no-update-workflow
  • Respects --update-on-failed semantics (updates snapshot on success)

Test plan

  • Unit tests for CLI arg parsing (comma separation, whitespace trimming, incompatibility with --no-update-workflow)
  • Unit tests for runner (sequential tag deployment, fail-fast on missing snapshot, skipping merge-base workflow)
  • Manual test with real git tags against an integration test

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

Adds a new `--update-from-tags` CLI option that deploys snapshots from
specified git tags in sequence before deploying the current code. This
enables on-call engineers to verify that a fix is safe for customers
currently on a broken version by exercising the full upgrade path.

The option implies `--force` and replaces the normal merge-base update
workflow. It fails fast if a snapshot does not exist at any specified tag.

Also fixes a pre-existing bug where `--allow-delete-failures` was not
being passed across the worker pool serialization boundary.
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 4, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@aws-cdk-automation aws-cdk-automation added this pull request to the merge queue Jun 4, 2026
Merged via the queue into main with commit b63b543 Jun 4, 2026
41 checks passed
@aws-cdk-automation aws-cdk-automation deleted the otaviom/integ-runner-update-from-tags branch June 4, 2026 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants