diff --git a/README.md b/README.md index 93b0bf1d..4a3488eb 100644 --- a/README.md +++ b/README.md @@ -118,8 +118,9 @@ The same run asks [infra-central][] to deploy the prod image. It dispatches a `bump-deployed-image` event carrying the manifest digest it just pushed, and infra-central's [Bump deployed image][receiver] workflow opens a pull request pinning that digest in `terraform/envs/dev/apps/terraform.tfvars`, with -auto-merge enabled. HCP Terraform applies the dev workspace on every commit to -infra-central's `main`, so merging that pull request is what deploys. +auto-merge enabled. infra-central's [Check and deploy][deploy] workflow runs +`tofu apply` on `dev/apps` on every push to its `main`, so merging that pull +request is what deploys. The dispatch runs as the `fil-forge-bot` GitHub App and needs the `FORGE_BOT_APP_ID` variable and the `FORGE_BOT_PRIVATE_KEY` secret. Prod pins @@ -127,3 +128,4 @@ are promoted by hand. [infra-central]: https://github.com/fil-forge/infra-central [receiver]: https://github.com/fil-forge/infra-central/blob/main/.github/workflows/bump-deployed-image.yml +[deploy]: https://github.com/fil-forge/infra-central/blob/main/.github/workflows/check-and-deploy.yml