Staging & Production
After onboarding, every deploy of the service publishes its OpenAPI specs and rebuilds the docs. Nobody runs anything by hand: the two workflows created during onboarding start when the deployed image tag changes.
| Staging | Production | |
|---|---|---|
| Workflow | docs-staging.yaml | docs-prod.yaml |
| Starts when | deployment/regions/us-east-1/nvq2/values.yaml changes on main | deployment/values.yaml changes on main |
| Registry pointer | stagingVersion | productionVersion |
| Docs site | docs.nvq2.ovp.kaltura.com/next | docs.kaltura.com |
| Checks | Quality score + sensitive data | Sensitive data only |
Deploying to Staging
- Update the pointer. The image tag in
deployment/regions/us-east-1/nvq2/values.yamlchanges and is pushed tomain. This is what deploys the service to staging, and it is also what startsdocs-staging.yaml. - Publish the specs. The workflow copies the specs from the deployed commit into
platform-content-registryas a new version, and points the service'sstagingVersionto it. - Build the staging docs. The workflow starts a staging build of
docs-kaltura-com, which deploys todocs.nvq2.ovp.kaltura.com/next. - Check quality. In parallel, the workflow runs the plugin's quality skill in non-interactive mode. If the score is below the threshold, it opens a PR in the service repo with the recommended fixes. A sensitive-data blocker fails the run.
Versions: each published version is named
<commit-date>-<commit>, for example 2026-10-12-4c90e4f. A published version is never overwritten — deploying an older image just moves the pointer back.
Deploying to Production
Production works like staging, with two differences:
- No quality check. Quality is handled on staging, before the version reaches production.
- Security check only. The workflow runs the sensitive-data check, and only if it passes does it publish the specs, set
productionVersion, and start the production docs build todocs.kaltura.comautomatically.
Disabled by default: onboarding creates
docs-prod.yaml disabled. It stays off until production publishing is approved for the service — the file's header explains how to turn it on.