Deployment Checklist
Executive Overview — all summaries for decision-makers.
After every production deploy (push to main → Render auto-deploy).
Pre-Deploy
- [ ] CI green (GitHub Actions)
- [ ] No open CRITICAL security issues
- [ ] Env vars in Render unchanged or documented
- [ ] For DB migration: backup created or PITR window known
Monitor Deploy
- [ ] Render:
mqa-backenddeploy status Live - [ ] Render:
mqa-frontenddeploy status Live - [ ] No build errors in logs
Smoke Tests (5 min)
Backend
bash
curl -sf https://api.mqa.group/health
# → {"status":"ok",...}
curl -sf https://api.mqa.group/api/auth/status \
-H "Origin: https://portal.mqa.group"
# → {"oauthEnabled":true,...}Frontend
- [ ] https://portal.mqa.group/login loads
- [ ] Microsoft 365 login redirect works
- [ ] After login: dashboard visible
- [ ] No CORS errors in browser console
Auth
- [ ] Logout → login again
- [ ] Mock login not available (production)
Critical Flows (spot check)
- [ ] Policies list loads
- [ ] Media Hub: file list (if R2 configured)
- [ ] Admin area only for admin role
Post-Deploy
- [ ] Notify team (Slack/email)
- [ ] On failure: rollback via Render Redeploy previous
Rollback
- Render Dashboard → Service → Deploys
- Previous Live deploy → Redeploy
- For DB migration issues: PITR restore → BACKUP-RESTORE-RUNBOOK
Staging (when live)
Same checks on staging.portal.mqa.group before production merge.