Skip to content

Deploy staging, beta and releases to python.microbit.org's new buckets - #1371

Merged
microbit-matt-hillsdon merged 1 commit into
mainfrom
python-microbit-org-stages
Oct 19, 2026
Merged

microbit-matt-hillsdon merged 1 commit into
mainfrom
python-microbit-org-stages

Conversation

@microbit-matt-hillsdon

Copy link
Copy Markdown
Collaborator

Staging, beta and production move to private buckets behind CloudFront, defined in microbit-foundation/microbit-org's apps/python, as review did in #1369.

  • Releases still deploy under v/3/ and main under v/beta/, now in python.microbit.org's own bucket beside the versioner.
  • main also deploys to stage-python.microbit.org under v/3/ for internal testing, so it builds twice, once per base path. Beta still builds with VITE_STAGE=STAGING, so it keeps today's simulator, analytics and flags.
  • Every stage deploys with an OIDC role rather than access keys, and finds its distribution from the bucket. Only main and release tags can assume the role for staging, beta and production; branches get the review role only.

Merging starts the switch: the first main build fills the new staging /v/3 and production /v/beta, and the old /v/beta stops updating. The hosts still point at the old distributions until they're moved, which should follow soon after. The new production bucket already has the current release under v/3/.

Both main builds upload Sentry source maps for the same release, which is worth watching.

The WEB_DEPLOY_AWS_* secrets go once the old distributions are cleaned up.

The buckets, distributions and roles are in microbit-foundation/microbit-org
(apps/python). Releases still deploy under v/3/ and main under v/beta/, now
in python.microbit.org's own bucket beside the versioner. main also deploys
to stage-python.microbit.org under v/3/ for internal testing, so it builds
twice, once per base path. Beta keeps behaving as staging (VITE_STAGE).

Every stage deploys with an OIDC role rather than access keys. Only main and
release tags can assume the role for staging, beta and production.
@github-actions

Copy link
Copy Markdown

@microbit-matt-hillsdon

Copy link
Copy Markdown
Collaborator Author

This scheme is intended to make it easy to drop in a beta branch build going to beta like CreateAI does.

@microbit-matt-hillsdon
microbit-matt-hillsdon merged commit 1e7130f into main Oct 19, 2026
3 checks passed
@microbit-matt-hillsdon
microbit-matt-hillsdon deleted the python-microbit-org-stages branch October 19, 2026 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant