---
name: "cicd-infra-pipeline"
description: "Generate CI/CD pipelines for infrastructure tiers with approval gates"
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/cicd/infra-pipeline.md instead -->

## Codex harness adaptations

Generated from a Claude Code command. Where the procedure references these Claude-only surfaces, adapt as follows:

- `CLAUDE.md` references: Codex reads `AGENTS.md`; treat them as the target repo's agent-context file.

# /cicd-infra-pipeline - Infrastructure CI/CD Pipelines

Generate separate CI/CD pipelines for each infrastructure tier with appropriate approval gates.

## Step 1: Locate CPP Source

```bash
CPP_DIR=""
for dir in ~/Projects/claude-power-pack /opt/claude-power-pack ~/.claude-power-pack; do
  if [ -d "$dir" ] && [ -f "$dir/CLAUDE.md" ]; then
    CPP_DIR="$dir"
    break
  fi
done

if [ -z "$CPP_DIR" ]; then
  echo "ERROR: claude-power-pack not found"
  exit 1
fi
```

---

## Instructions

1. **Read configuration** from `.claude/cicd.yml` infrastructure section.

2. **Generate pipelines:**

```bash
PYTHONPATH="$CPP_DIR:$PYTHONPATH" uv run --project "$CPP_DIR" python -m lib.cicd infra-pipeline --path "$(pwd)" --write
```

3. **Report what was generated** and explain the approval model:
   - Foundation: requires environment approval in GitHub (or manual in Woodpecker)
   - Platform: auto-deploy on merge (configurable)
   - App: auto-deploy on merge

## Pipeline Model

Each tier gets its own workflow file, triggered only by changes to that tier's directory:

- `.github/workflows/infra-foundation.yml` - Manual approval required
- `.github/workflows/infra-platform.yml` - Auto-deploy (configurable)
- `.github/workflows/infra-app.yml` - Auto-deploy

### Approval Gates

Foundation tier uses GitHub Environments with required reviewers. Set up:
1. Go to repo Settings > Environments
2. Create `infra-foundation` environment
3. Add required reviewers

## Related

- `/cicd-infra-init` - Scaffold IaC directory structure
- `/cicd-infra-discover` - Audit existing cloud resources
- `/cicd-pipeline` - Application-layer pipeline generation