Add PR preview cleanup workflow for frontend by lmcdonough · Pull Request #226 · refactor-group/refactor-platform-fe

lmcdonough · 2025-11-07T02:12:12Z

Implements automated cleanup for PR preview environments. Triggers on pull_request closed event and calls backend reusable workflow.

Implement frontend PR preview overlay workflow that calls the reusable deployment workflow from the backend repository. **New File:** - pr-preview-frontend.yml: Frontend PR overlay workflow - Triggers on frontend PR events (opened, synchronize, reopened) - Calls refactor-platform-rs reusable workflow - Builds frontend from PR branch, uses main-arm64 backend - Uses repository-level secrets (no pr-preview environment) - Passes all required secrets for deployment to RPi5 **Workflow Strategy:** - repo_type: 'frontend' - builds frontend from PR, backend from main - Automatic main-arm64 backend build if image doesn't exist - Isolated PR environment with unique ports - Full stack deployment (postgres, backend, frontend) on Neo/RPi5 **Secret Requirements:** All secrets must be configured at repository level in frontend repo: - RPi5 SSH/Tailscale connection details - Database configuration (postgres user, password, db, schema) - Third-party service credentials (TipTap, MailerSend) - Frontend build configuration (backend service connection) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

Remove all secret passing from frontend PR preview workflow. Secrets are now automatically accessed from backend repo's pr-preview environment. **Workflow Changes:** - Remove entire `secrets:` section (45+ lines removed) - No secrets needed in frontend repo for PR previews - Workflow now only passes configuration inputs - Uses backend repo's pr-preview environment automatically **Documentation:** - Add comprehensive PR preview runbook - Links to backend runbook for complete details - Add PR preview section to README - Quick reference for developers **Result:** - Frontend repo needs ZERO PR preview secrets - All secrets managed centrally in backend repo - Single source of truth for configuration - Simpler onboarding for new developers 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

Add automatic cleanup workflow that triggers when frontend PRs are closed or merged, calling the backend repo's reusable cleanup workflow. **Frontend Caller (cleanup-pr-preview-frontend.yml):** - Triggers on pull_request types: [closed] - Calls backend repo's reusable cleanup workflow - Passes only repo_type, pr_number, branch_name - No secrets needed (uses backend pr-preview environment) **What Gets Cleaned:** - Docker containers (postgres, backend, frontend, migrator) - Docker volumes (database data) - Compose and environment files - PR-specific images from RPi5 and GHCR **What Gets Kept:** - PostgreSQL base images (shared across PRs) - main-arm64 images (for Docker layer caching) **Benefits:** - Automatic cleanup on PR close/merge - Zero secrets required in frontend repo - Prevents resource accumulation - Follows same pattern as deploy workflow 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

Add 'secrets: inherit' to pass GITHUB_TOKEN to the reusable workflow in the backend repository. This is required when calling workflows across repository boundaries. The reusable workflow (in refactor-platform-rs) uses its own pr-preview environment for all secrets, but needs the GITHUB_TOKEN from the calling repository for authentication. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

…se specific commit for staging environment

@main

…TODO Changes: 1. Add TODO comment to update workflow reference to @main once backend PR #201 merges 2. Clarify that environment resolution uses backend repo's pr-preview environment 3. Add cleanup workflow to paths-ignore for consistency with backend The frontend workflow now correctly documents that when calling the backend's reusable workflow, the 'environment: pr-preview' references in that workflow resolve to the BACKEND repo's environment, not the frontend's. This allows centralizing all secrets in the backend repo's pr-preview environment. The workflow inherits the fix from backend PR #201 (removal of problematic 'if: needs.build-arm64-image.result == success' condition) and will deploy the full stack (backend + frontend + postgres) to neo when frontend PRs are opened or updated. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

This empty commit tests the frontend PR preview workflow to verify: - Secrets are now accessible from backend repo's pr-preview environment - Frontend lint and test jobs succeed - Full stack deploys to neo (postgres + backend + frontend) - PR comment posts with access URLs 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

@main

Before merge: The docker-compose.pr-preview.yaml file only exists on the backend PR branch (190-add-a-staging-environment...), not on main yet. To allow frontend PR testing now, temporarily use the backend PR branch. After merge: Both the workflow reference (@main) and backend_branch ('main') should be updated back to stable references. Changes: - backend_branch: Use backend PR branch temporarily (has compose file) - Updated TODO comments to be more specific about post-merge changes This allows frontend workflow to succeed both before and after backend PR #201 merges, following the same paradigm as backend workflow. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

…thub-actions-workflows-for-preview-environments-on-pull-requests

- Create docs/cicd/README.md with frontend CI/CD overview - Document all 5 GitHub Actions workflows - Explain PR preview environment integration with backend - Point to backend repo for comprehensive CI/CD documentation - Update main README.md with CI/CD & Deployment section - Reorganize PR Preview Environments as subsection of CI/CD

… push The frontend PR preview workflow failed because GITHUB_TOKEN lacks write_package permission for the backend repo's GHCR packages. This adds: - check-backend-image job: pre-checks if main-arm64 exists in GHCR and passes it as backend_image override to skip cross-repo build/push - GHCR_PAT/GHCR_USERNAME secrets for cross-repo authentication when the backend image must be built from scratch - report-missing-image job: posts a PR comment with remediation steps when the backend image is missing and the deploy fails Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

github-actions · 2026-01-30T16:37:06Z

⚠️ PR Preview Deploy Failed — Backend Image Missing

The backend image ghcr.io/refactor-group/refactor-platform-rs:main-arm64 was not found in GHCR, and the cross-repo build/push failed (likely due to an expired or missing GHCR_PAT secret).

How to fix

Create a PAT with write:packages scope at GitHub Settings → Tokens

Store it as a repo secret:

gh secret set GHCR_PAT --repo refactor-group/refactor-platform-fe --body "<your-token>"
gh secret set GHCR_USERNAME --repo refactor-group/refactor-platform-fe --body "<your-username>"

Re-run this workflow from the Actions tab

Alternatively, push a commit to the backend repo's main branch to rebuild the main-arm64 image, then re-run this workflow.

…ecrets

Update the secrets section comment in the frontend PR preview workflow to accurately describe how org/repo secrets flow through when the reusable workflow conditionally skips the pr-preview environment.

…for-preview-environments-on-pull-requests

Updated comment to reflect that the reusable workflow now always uses its own pr-preview environment (from backend repo), which provides access to all secrets including Tiptap and MailerSend for cross-repo calls.

lmcdonough and others added 4 commits November 6, 2025 19:46

cleaning up workflow_call parameters for cleaning up preview envs.

b953e02

lmcdonough linked an issue Nov 7, 2025 that may be closed by this pull request

[Feature]: Create GitHub Actions Workflows for Preview Environments on Pull Requests #225

Open

lmcdonough and others added 2 commits November 7, 2025 10:29

Update reusable workflows for frontend PR cleanup and deployment to u…

793ecff

…se specific commit for staging environment

lmcdonough had a problem deploying to pr-preview November 7, 2025 16:17 — with GitHub Actions Failure

lmcdonough had a problem deploying to pr-preview November 7, 2025 17:24 — with GitHub Actions Failure

lmcdonough temporarily deployed to pr-preview November 7, 2025 17:34 — with GitHub Actions Inactive

lmcdonough requested a deployment to pr-preview November 7, 2025 17:39 — with GitHub Actions In progress

lmcdonough temporarily deployed to pr-preview November 7, 2025 17:59 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview November 7, 2025 18:06 — with GitHub Actions Error

Merge remote-tracking branch 'origin/main' into 225-feature-create-gi…

3d8721c

…thub-actions-workflows-for-preview-environments-on-pull-requests

lmcdonough temporarily deployed to pr-preview December 29, 2025 20:45 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview December 29, 2025 20:50 — with GitHub Actions Error

lmcdonough temporarily deployed to pr-preview December 29, 2025 20:52 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview December 29, 2025 20:58 — with GitHub Actions Error

lmcdonough force-pushed the 225-feature-create-github-actions-workflows-for-preview-environments-on-pull-requests branch from 7358c12 to f4df06d Compare December 29, 2025 23:13

lmcdonough temporarily deployed to pr-preview December 29, 2025 23:13 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview January 30, 2026 15:35 — with GitHub Actions Failure

lmcdonough temporarily deployed to pr-preview January 30, 2026 16:09 — with GitHub Actions Inactive

lmcdonough temporarily deployed to pr-preview January 30, 2026 16:14 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview January 30, 2026 16:36 — with GitHub Actions Failure

fix(workflows): update remediation docs to reference org-level GHCR s…

934a579

…ecrets

lmcdonough temporarily deployed to pr-preview January 30, 2026 23:54 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview January 30, 2026 23:59 — with GitHub Actions Failure

lmcdonough temporarily deployed to pr-preview January 31, 2026 00:05 — with GitHub Actions Inactive

lmcdonough temporarily deployed to pr-preview January 31, 2026 00:11 — with GitHub Actions Inactive

lmcdonough had a problem deploying to pr-preview January 31, 2026 00:12 — with GitHub Actions Failure

fix(workflows): update secrets comment to reflect cross-repo resolution

30812ba

Update the secrets section comment in the frontend PR preview workflow to accurately describe how org/repo secrets flow through when the reusable workflow conditionally skips the pr-preview environment.

lmcdonough temporarily deployed to pr-preview February 1, 2026 01:14 — with GitHub Actions Inactive

fix(workflows): document SSH secret requirements for PR preview

4fc51b1

lmcdonough temporarily deployed to pr-preview February 4, 2026 15:58 — with GitHub Actions Inactive

fix(workflows): clarify secret inheritance for cross-repo GHCR access

faed40d

lmcdonough temporarily deployed to pr-preview February 4, 2026 16:08 — with GitHub Actions Inactive

lmcdonough added 2 commits February 6, 2026 10:40

Merge branch 'main' into 225-feature-create-github-actions-workflows-…

7563edf

…for-preview-environments-on-pull-requests

docs(workflows): update secrets strategy comment

a470318

Updated comment to reflect that the reusable workflow now always uses its own pr-preview environment (from backend repo), which provides access to all secrets including Tiptap and MailerSend for cross-repo calls.

lmcdonough temporarily deployed to pr-preview February 6, 2026 16:01 — with GitHub Actions Inactive

lmcdonough deployed to pr-preview February 6, 2026 16:06 — with GitHub Actions Active

lmcdonough had a problem deploying to pr-preview February 6, 2026 16:12 — with GitHub Actions Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add PR preview cleanup workflow for frontend#226

Add PR preview cleanup workflow for frontend#226
lmcdonough wants to merge 25 commits intomainfrom
225-feature-create-github-actions-workflows-for-preview-environments-on-pull-requests

lmcdonough commented Nov 7, 2025

Uh oh!

github-actions bot commented Jan 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

lmcdonough commented Nov 7, 2025

Uh oh!

github-actions bot commented Jan 30, 2026

⚠️ PR Preview Deploy Failed — Backend Image Missing

How to fix

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant