Skip to content

feat: Deployment Guard recipe, lab, and blog post#184

Closed
dm-chelupati wants to merge 1 commit into
mainfrom
feature/deployment-guard-recipe-lab
Closed

feat: Deployment Guard recipe, lab, and blog post#184
dm-chelupati wants to merge 1 commit into
mainfrom
feature/deployment-guard-recipe-lab

Conversation

@dm-chelupati
Copy link
Copy Markdown
Collaborator

New Recipe: law-dynatrace-httptrigger

SRE Agent with LAW + Dynatrace MCP connectors, GitHub repo, HTTP trigger, and deployment guard — the PR review pattern.

Component Details
Skills deployment-guard-analysis (9-step PR analysis), investigate-app-errors
Subagents deployment-guard, error-investigator
HTTP Trigger pr-deployment-guard (receives GitHub PR webhooks via Logic App bridge)
Connectors Log Analytics, Dynatrace MCP
Hooks deny-prod-deletes, require-approval-for-restarts
Common Prompts investigation-guidelines, safety-rules

Tested

  • new-agent.sh generation ✅
  • deploy.sh --dry-run
  • deploy.sh live deploy ✅ (swedencentral)
  • API verification: all components deployed correctly ✅
  • Webhook flow: GitHub Actions → Logic App → agent HTTP trigger → thread created ✅
  • Agent analysis: cloned repo, read diff, identified DATABASE_URL rename ✅
  • clone-agent.sh export: full round-trip ✅

New Lab: deployment-guard

End-to-end walkthrough using contoso-trading:

  • Step 0: Deploy sample app (prod + staging)
  • Step 1: Deploy agent with recipe
  • Step 2-3: Wire webhook + GitHub secret
  • Step 4: Test with risky PR (DATABASE_URL rename)
  • Demo script, prereqs check, setup automation

Blog Post

labs/deployment-guard/docs/blog-shift-left-deployment-guard.md
"Shift Left with Azure SRE Agent: An Agent That Guards Every PR"

Bug Fix

new-agent.sh: macOS paste -sd,paste -s -d, - (fixes all recipes with comma-separated targetRGs on macOS)

- New recipe: law-dynatrace-httptrigger
  LAW + Dynatrace MCP + GitHub repo + HTTP trigger + deployment guard
  Skills: deployment-guard-analysis, investigate-app-errors
  Subagents: deployment-guard, error-investigator
  Includes sample GitHub Actions workflow for PR webhooks

- New lab: deployment-guard
  End-to-end walkthrough using contoso-trading as target app
  Step 0: deploy app (prod + staging)
  Step 1-4: deploy agent, wire webhook, test with risky PR
  Demo script, prereqs check, setup automation

- Blog post: Shift Left with Azure SRE Agent

- Fix: macOS paste compatibility in new-agent.sh (affects all recipes)
- Dry-run test script for new recipe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant