From 92c261795cf6fdef74a9a399588f99f52b8d545c Mon Sep 17 00:00:00 2001
From: Bharat Kathi <bharat1031@gmail.com>
Date: Fri, 10 Jul 2026 22:12:44 -0700
Subject: [PATCH] fix(deploy): update kustomization path, attribute to
 @gauchoracing, add diff link

Mirrors the three fixes made to the vault repo's deploy workflow in
Gaucho-Racing/Vault#12:

1. Update kustomization path from
   kubernetes/manifests/sentinel/kustomization.yaml
   to
   kubernetes/gr-foundry/manifests/sentinel/kustomization.yaml
   Sentinel now lives on gr-foundry after the migration in
   gaucho-racing/infrastructure#129; the deploy job needs to bump the
   tag in the new path.

2. Attribute the bump commit to @gauchoracing via team@gauchoracing.com
   (verified on the account) instead of github-actions[bot]. Same PAT
   the workflow already uses; consistent audit trail.

3. Add a "Click here to view all changes" link at the bottom of the PR
   body, pointing at GitHub's compare view for OLD_TAG..NEW_TAG in the
   sentinel repo. One-click access to the unified diff for reviewers.
---
 .github/workflows/deploy.yml | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 1168cad..7aa4913 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -14,7 +14,7 @@ on:
 
 env:
   INFRA_REPO: Gaucho-Racing/infrastructure
-  KUSTOMIZATION: infra/kubernetes/manifests/sentinel/kustomization.yaml
+  KUSTOMIZATION: infra/kubernetes/gr-foundry/manifests/sentinel/kustomization.yaml
   SERVICES: "core oauth discord saml google web"
 
 jobs:
@@ -67,7 +67,7 @@ jobs:
             { print }
           ' "$KUSTOMIZATION" > "$KUSTOMIZATION.tmp" && mv "$KUSTOMIZATION.tmp" "$KUSTOMIZATION"
           echo "--- diff ---"
-          git -C infra diff -- kubernetes/manifests/sentinel/kustomization.yaml
+          git -C infra diff -- kubernetes/gr-foundry/manifests/sentinel/kustomization.yaml
 
       - name: Build changelog
         if: steps.versions.outputs.skip == 'false'
@@ -111,6 +111,8 @@ jobs:
               emit_commits -20 "$NEW_TAG"
             fi
             echo
+            echo "**[Click here to view all changes →](https://github.com/${SENTINEL_REPO}/compare/${OLD_TAG}...${NEW_TAG})**"
+            echo
             echo "---"
             echo "_Opened automatically by the \`deploy\` workflow on release ${NEW_TAG}._"
           } > "$RUNNER_TEMP/pr-body.md"
@@ -127,8 +129,13 @@ jobs:
           RELEASE_AUTHOR: ${{ github.event.release.author.login }}
         run: |
           BRANCH="bot/bump-sentinel-${NEW}"
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          # Attribute the commit to the gauchoracing service account (matches
+          # the PAT this job uses) so both the commit and the PR opener show
+          # as @gauchoracing in the infra repo, not github-actions[bot].
+          # team@gauchoracing.com is verified on the account, so GitHub
+          # links the commit to @gauchoracing automatically.
+          git config user.name "GR Admin"
+          git config user.email "team@gauchoracing.com"
           git switch -C "$BRANCH"
           git commit -am "Deploy: sentinel to ${NEW_TAG} (${SHORT_SHA})"
           git push -f -u origin "$BRANCH"