From 920929825143afbea18e8cf32ecd2fb087b201da Mon Sep 17 00:00:00 2001
From: Juan Celhay <jicelhay@google.com>
Date: Wed, 16 Sep 2026 17:19:52 -0400
Subject: [PATCH] Add prod auto-promote and canary-1 advance rules to CD
 pipeline

---
 release/clouddeploy/README.md              |  2 +-
 release/clouddeploy/delivery-pipeline.yaml | 34 +++++++++++++++++++++-
 2 files changed, 34 insertions(+), 2 deletions(-)

diff --git a/release/clouddeploy/README.md b/release/clouddeploy/README.md
index 75d5aa78069..ad6ff1fcbd2 100644
--- a/release/clouddeploy/README.md
+++ b/release/clouddeploy/README.md
@@ -5,7 +5,7 @@ This directory contains the Google Cloud Deploy configuration files for the Nomu
 ## Files
 
 ### `delivery-pipeline.yaml`
-Defines the `DeliveryPipeline` resource named `deploy-nomulus` and its associated `Automation` resource (`deploy-nomulus/auto-advance-canary`). It sets up the serial pipeline for rolling out changes to different targets and automatically advancing canary rollouts.
+Defines the `DeliveryPipeline` resource named `deploy-nomulus` and its associated `Automation` resources. It sets up the serial pipeline for rolling out changes to different targets, automatically promoting releases, and automatically advancing canary rollouts.
 
 ### Target Configurations (e.g., `crash-target.yaml`)
 Files matching this format define the `Target` resources for Cloud Deploy. They specify the GKE cluster and other environment-specific settings for deployment.
diff --git a/release/clouddeploy/delivery-pipeline.yaml b/release/clouddeploy/delivery-pipeline.yaml
index 8ed36c21634..ce89f911054 100644
--- a/release/clouddeploy/delivery-pipeline.yaml
+++ b/release/clouddeploy/delivery-pipeline.yaml
@@ -277,6 +277,23 @@ rules:
 ---
 apiVersion: deploy.cloud.google.com/v1
 kind: Automation
+metadata:
+  name: deploy-nomulus/auto-advance-canary-production
+description: Automatically advances rollouts from canary-1 to canary-5 phase in production.
+# Placeholder: Replace with project service account.
+serviceAccount: serviceAccount
+selector:
+  targets:
+  - id: production
+rules:
+- advanceRolloutRule:
+    id: advance-canary-phases
+    sourcePhases:
+    - "canary-1"
+    wait: 0m
+---
+apiVersion: deploy.cloud.google.com/v1
+kind: Automation
 metadata:
   name: deploy-nomulus/auto-promote-crash-to-sandbox
 description: Automatically promotes release to sandbox after successful rollout in crash.
@@ -290,4 +307,19 @@ rules:
     id: promote-crash-to-sandbox
     destinationTargetId: "sandbox"
     wait: 0m
-
+---
+apiVersion: deploy.cloud.google.com/v1
+kind: Automation
+metadata:
+  name: deploy-nomulus/auto-promote-sandbox-to-production
+description: Automatically promotes release to production after successful rollout in sandbox.
+# Placeholder: Replace with project service account.
+serviceAccount: serviceAccount
+selector:
+  targets:
+  - id: sandbox
+rules:
+- promoteReleaseRule:
+    id: promote-sandbox-to-production
+    destinationTargetId: "production"
+    wait: 0m