From 87516ec205be887ffa39437d13190ff1b8a51eaf Mon Sep 17 00:00:00 2001
From: Saman Sartipi <samansartipi@gmail.com>
Date: Wed, 15 Jul 2026 16:34:36 -0400
Subject: [PATCH] Publish steampipe image by gitsha only, stop pushing :latest

The dev and prod workflows now push only steampipe:<gitsha> instead of
also tagging :latest. Consumers pin to a specific gitsha, so :latest is no
longer needed. Remove the rollout-restart of extractor-steampipe (it only
deployed a new image because the deployment tracked :latest) and the
Set kubecontext for EKS step that existed solely for it. Rename the local
docker-build tag to local/steampipe:local.
---
 .github/workflows/dev.yml  | 10 +---------
 .github/workflows/prod.yml | 10 +---------
 Makefile                   |  2 +-
 3 files changed, 3 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
index ccb845c82..b39cd4509 100644
--- a/.github/workflows/dev.yml
+++ b/.github/workflows/dev.yml
@@ -31,9 +31,6 @@ jobs:
       - name: Login to Amazon ECR
         uses: aws-actions/amazon-ecr-login@v2
 
-      - name: Set kubecontext for EKS
-        run: aws eks update-kubeconfig --region us-west-2 --name catio-cluster
-
       - name: Build and push steampipe image
         uses: docker/build-push-action@v6
         with:
@@ -41,9 +38,4 @@ jobs:
           file: docker/steampipe/Dockerfile
           platforms: linux/amd64
           push: true
-          tags: |
-            ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.us-west-2.amazonaws.com/steampipe:latest
-            ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.us-west-2.amazonaws.com/steampipe:${{ env.GIT_COMMIT_SHA }}
-
-      - name: Restart the extractor-steampipe deployment
-        run: kubectl rollout restart deployment extractor-steampipe -n catio-data-extraction
+          tags: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.us-west-2.amazonaws.com/steampipe:${{ env.GIT_COMMIT_SHA }}
diff --git a/.github/workflows/prod.yml b/.github/workflows/prod.yml
index 2d5230427..0dcdf7ae1 100644
--- a/.github/workflows/prod.yml
+++ b/.github/workflows/prod.yml
@@ -29,9 +29,6 @@ jobs:
       - name: Login to Amazon ECR
         uses: aws-actions/amazon-ecr-login@v2
 
-      - name: Set kubecontext for EKS
-        run: aws eks update-kubeconfig --region us-west-2 --name catio-cluster
-
       - name: Build and push steampipe image
         uses: docker/build-push-action@v6
         with:
@@ -41,9 +38,4 @@ jobs:
           build-args: |
             PY_PAT=${{ secrets.PY_PAT }}
           push: true
-          tags: |
-            ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.us-west-2.amazonaws.com/steampipe:latest
-            ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.us-west-2.amazonaws.com/steampipe:${{ env.GIT_COMMIT_SHA }}
-
-      - name: Restart the extractor-steampipe deployment
-        run: kubectl rollout restart deployment extractor-steampipe -n catio-data-extraction
+          tags: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.us-west-2.amazonaws.com/steampipe:${{ env.GIT_COMMIT_SHA }}
diff --git a/Makefile b/Makefile
index a2c3c79cf..57ce83843 100644
--- a/Makefile
+++ b/Makefile
@@ -8,6 +8,6 @@ install:
 docker-build-steampipe:
 	@docker build \
 		--platform $(PLATFORM) \
-		-t local/steampipe:latest \
+		-t local/steampipe:local \
 		-f docker/steampipe/Dockerfile \
 		.
\ No newline at end of file