ci: deploy changed apps from main

.github/workflows/edge.yml → .github/workflows/deploy.yml

@@ -1,11 +1,11 @@
-name: Edge Release
+name: Main Deploy
 
 on:
   push:
     branches: [ main ]
 
 concurrency:
-  group: edge-release
+  group: main-deploy
   cancel-in-progress: false
 
 jobs:
@@ -65,9 +65,9 @@ jobs:
       services: ${{ needs.changes.outputs.services }}
     secrets: inherit
 
-  # Then retag the changed multiarch images as edge
-  retag-edge:
-    name: Retag ${{ matrix.service }} as edge
+  # Then publish the changed multiarch images to the release tags used by k8s.
+  publish:
+    name: Publish ${{ matrix.service }}
     runs-on: ubuntu-latest
     needs: [changes, build]
     if: ${{ needs.changes.outputs.has_services == 'true' }}
@@ -84,9 +84,8 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - name: Retag as edge
+      - name: Publish release tags
         run: |
           REPO="audius/${{ matrix.service }}"
           SOURCE_TAG="${REPO}:${{ github.sha }}"
-          EDGE_TAG="${REPO}:edge"
-          docker buildx imagetools create "$SOURCE_TAG" --tag "$EDGE_TAG"
+          docker buildx imagetools create "$SOURCE_TAG" --tag "${REPO}:edge" --tag "${REPO}:latest"

BUILD.md

@@ -91,9 +91,8 @@ npm run docker:archiver            # Build archiver
 ### CI/CD
 - Each app builds as a separate GitHub Actions job
 - Failures are isolated - one app failing doesn't affect others
-- Pushes to `main` build and publish only apps with changes under their `apps/<app>` directory
+- Pushes to `main` build only apps with changes under their `apps/<app>` directory, then publish those images as both `edge` and `latest`
 - PRs to `main` build all configured apps
-- Can be manually triggered via workflow dispatch
 
 ## Troubleshooting