DevOps: deploy pipeline (dummy)

This note lives under backend/devops/ to show nested folders. URLs look like /backend/devops/deploy-pipeline.

What runs in CI

• Lint and unit tests on every push.
• Integration tests on merge to main.
• Container image build and push to the registry.

Promotion

We deploy to staging automatically from main. Production needs a tagged release and an explicit approval in the deploy tool.

# Example: promote the current staging image
deploy promote --env production --service api

Keep secrets out of the repo. CI reads them from the environment provider, never from markdown.

Rollback

If error rates spike after a deploy, roll back to the previous image. The last three production images are always kept hot.