[AdamBelfki3]

Summary

Adds a manually triggered Deploy to ECS workflow (.github/workflows/deploy-ecs.yml) that redeploys the ECS service running the image main.yml builds and pushes to ECR. Today a new image only reaches ECS if someone restarts the service by hand.

• Forces a new deployment of the service. The task definition references the latest tag, which ECS resolves to a digest at the start of each deployment, so the newest push gets picked up.
• Tracks that deployment's rolloutState until it is COMPLETED, FAILED, or no longer listed (rolled back or superseded), with a 20-minute timeout. aws ecs wait services-stable isn't used because it also succeeds once a circuit-breaker rollback settles on the previous image.
• Writes the cluster, service, deployment id and task definition to the job summary.
• One deployment at a time: a second run queues instead of cancelling the one in flight.

The build workflow is unchanged. workflow_call can be added later if main.yml should deploy automatically after pushing.

Setup before the first run

• Repo variables ECS_CLUSTER and ECS_SERVICE (the cluster name and the service name from the ECS console). The workflow fails early if either is missing.
• The AWS_IAM_ROLE role needs ecs:UpdateService and ecs:DescribeServices on the service.
• If the service runs one task on a single instance with a fixed host port, set its deployment configuration to minimum healthy 0% / maximum 100%. Otherwise the new task can't be placed while the old one holds the port, and the deployment times out.
• Optionally, turn on the ECS deployment circuit breaker with rollback so a bad image reverts on its own; this workflow then reports the failure.

Testing

• actionlint (with shellcheck) passes on the new workflow.
• The deployment-tracking JMESPath queries were checked against mock describe-services responses for in-progress, completed, failed and rolled-back deployments.
• Not run against AWS yet: a workflow_dispatch workflow can only be triggered once it is on the default branch.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
workbench	Ready	Preview	Oct 29, 2026 6:37pm UTC

[coderabbitai]

Caution

Review failed

The pull request is closed.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🚀 Preview deployed

• App: https://pr-154.ndif-preview.ripley.cloud
• API: https://pr-154-api.ndif-preview.ripley.cloud/docs
• Web image: ghcr.io/ndif-team/workbench/web:pr-154-52b4cec64d29da482ce8b2186edd6109064f45ff
• API image: ghcr.io/ndif-team/workbench/api:pr-154-52b4cec64d29da482ce8b2186edd6109064f45ff
• Namespace: workbench-preview-pr-154

[argos-ci]

The latest updates on your projects. Learn more about Argos notifications ↗︎

Build	Status	Details	Updated (UTC)
default (Inspect)	⚠️ Changes detected (Review)	13 removed	Oct 29, 2026, 6:45 PM