Promotion Workflow

Promotion Workflow A workflow diagram generated by Archify. 01 / CI Pipeline 02 / Registry Repositories Build once Promote by retag, not rebuild Build · abc123f-dev · CI Pipeline › Build once · CI Build abc123f-dev CI myapp-dev · abc123f-dev · Registry Repositories › Promote by retag, not rebuild · mutable myapp-dev abc123f-dev mutable myapp-stage · 1.2.3-rc.1 · Registry Repositories › Promote by retag, not rebuild · immutable myapp-stage 1.2.3-rc.1 immutable myapp-prod · 1.2.3 · Registry Repositories › Promote by retag, not rebuild · immutable myapp-prod 1.2.3 immutable push retag + promote retag + promote Legend CI build step Registry repository

Promotion step

  • • docker pull SOURCE_REPO:SOURCE_TAG
  • • docker tag to TARGET_REPO:TARGET_TAG
  • • docker push the retagged image

Why not rebuild

  • • The same image digest travels through every environment
  • • What was tested in stage is bit-for-bit what runs in prod
  • • Production and staging tags are immutable SemVer; dev tags are SHA-based