name: Production Hotfix Deploy on: workflow_dispatch: inputs: ref: description: 'Git ref to deploy' required: true default: 'main' type: string permissions: contents: read packages: write id-token: write jobs: deploy: runs-on: ubuntu-latest environment: production steps: - uses: actions/checkout@v4 with: ref: ${{ inputs.ref }} - uses: aws-actions/configure-aws-credentials@v4 with: role-to-assume: arn:aws:iam::123456789012:role/prod-deploy aws-region: us-east-1 - run: docker build -t ghcr.io/acme/api:hotfix-${{ github.run_id }} . - run: docker push ghcr.io/acme/api:hotfix-${{ github.run_id }} - run: kubectl -n production set image deploy/api api=ghcr.io/acme/api:hotfix-${{ github.run_id }} - run: kubectl rollout status deploy/api -n production --timeout=180s