jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Just pushing instead of copying

Browse Source
This commit is contained in:
Josh 2025-09-12 15:49:42 +00:00
parent e3ed1e3b13
commit 3b7d64638e
1 changed files with 27 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
.woodpecker.yml
View File

@ -13,29 +13,42 @@ steps:
set -euo pipefail set -euo pipefail
if [ "${PROMOTE:-}" != "prod" ]; then echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; fi if [ "${PROMOTE:-}" != "prod" ]; then echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; fi
# Dev is the single source of truth for IMG_TAG
IMG_TAG="$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev)" IMG_TAG="$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev)"
SRC="us-central1-docker.pkg.dev/aptivaai-dev/aptiva-repo" SRC="us-central1-docker.pkg.dev/aptivaai-dev/aptiva-repo"
DST="us-central1-docker.pkg.dev/aptivaai-prod/aptiva-repo" DST="us-central1-docker.pkg.dev/aptivaai-prod/aptiva-repo"
[ -n "$IMG_TAG" ] || { echo "❌ IMG_TAG empty"; exit 2; }
[ -n "$IMG_TAG" ] || { echo "❌ IMG_TAG is empty"; exit 2; } apt-get update -qq && apt-get install -y -qq skopeo
apt-get update -qq
apt-get install -y -qq skopeo
TOKEN="$(gcloud auth print-access-token)" TOKEN="$(gcloud auth print-access-token)"
# check which images are missing in PROD
missing=()
for s in server1 server2 server3 nginx; do for s in server1 server2 server3 nginx; do
REF="docker://$DST/$s:$IMG_TAG"
if ! skopeo inspect --creds "oauth2accesstoken:$TOKEN" "$REF" >/dev/null 2>&1; then
missing+=("$s")
fi
done
if [ ${#missing[@]} -eq 0 ]; then
echo "✅ All images already present in PROD for :$IMG_TAG — skipping mirror"
else
echo "🔁 Mirroring ${missing[*]} to PROD…"
for s in "${missing[@]}"; do
SRC_REF="docker://$SRC/$s:$IMG_TAG" SRC_REF="docker://$SRC/$s:$IMG_TAG"
DST_REF="docker://$DST/$s:$IMG_TAG" DST_REF="docker://$DST/$s:$IMG_TAG"
echo "🔁 copy $SRC_REF → $DST_REF" echo "copy $SRC_REF → $DST_REF"
skopeo copy --insecure-policy \ skopeo copy --insecure-policy \
--src-creds "oauth2accesstoken:$TOKEN" \ --src-creds "oauth2accesstoken:$TOKEN" \
--dest-creds "oauth2accesstoken:$TOKEN" \ --dest-creds "oauth2accesstoken:$TOKEN" \
"$SRC_REF" "$DST_REF" "$SRC_REF" "$DST_REF"
done done
fi
# publish tag to prod SM regardless
printf '%s' "$IMG_TAG" | gcloud secrets versions add IMG_TAG --data-file=- --project=aptivaai-prod >/dev/null printf '%s' "$IMG_TAG" | gcloud secrets versions add IMG_TAG --data-file=- --project=aptivaai-prod >/dev/null
echo "🏷 Promoted IMG_TAG=$IMG_TAG → aptivaai-prod" echo "🏷 promoted IMG_TAG=$IMG_TAG"
- name: verify-sync - name: verify-sync
depends_on: [promote-tag-and-mirror] depends_on: [promote-tag-and-mirror]