ci: auto-bump flash chart version on image bump (1/3 one-step deploy)#428
Merged
Conversation
The image-bump pipeline set the image digests and appVersion in the flash chart but left Chart.yaml `version` unchanged — a manual edit every deploy. That version is load-bearing: package-releases.sh publishes with `helm push ... | grep -v "already exists"`, so an unchanged version makes the push silently no-op and the OCI registry keeps the stale chart; a `make flash ENV=<env>` apply (terraform helm_release pinned to that version) then re-pulls the old image. Increment the chart's semver patch alongside the digest/appVersion bump so every image bump produces a distinct, publishable, deployable chart version. Piece 1 of 3 toward a one-step deploy (this repo). Companion charts-repo work publishes the new version to OCI on merge and syncs the terraform version pin in deployments. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
bobodread876
approved these changes
Jul 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Automates the manual
Chart.yamlversion bump (3.2.11 → 3.2.12) that gates every deploy.ci/tasks/bump-image-digest.sh(which generates thebump-flash-imagePR to the charts repo) already sets the image digests andappVersion, but left the chartversionalone. That was a manual edit — and a load-bearing one:package-releases.shpublishes withhelm push … | grep -v "already exists", so an unchanged version makes the push silently no-op and the OCI registry keeps the stale chart.make flash ENV=test(terraformhelm_releasepinned tooci://ghcr.io/brh28version3.2.11) then re-pulls the old image.Confirmed on the jumpbox: TEST runs chart
flash-3.2.11fromrepository = oci://ghcr.io/brh28, so OCI-semver is the live deploy path.This increments the chart's semver patch alongside the digest/appVersion bump, so every image bump is a distinct publishable/deployable version. Verified the awk logic (
3.2.11→3.2.12, multi-digit rollover99→100) andbash -n.Part of a 3-piece one-step-deploy change
package-releasesruns automatically).versionpin intf-modules/flash/main.tfto the published version.After all three, a deploy is just
make flash ENV=test.🤖 Generated with Claude Code