jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipeline build v44. reverted and add single GCP secret

Browse Source
This commit is contained in:
Josh 2025-07-31 17:13:13 +00:00
parent ee2ffe9f12
commit 3e292b8522
1 changed files with 15 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
.woodpecker.yml
View File

@ -1,7 +1,7 @@
---
kind: pipeline
type: docker
name: ssh-deploy-test
name: ssh-test
steps:
- name: ssh-test
@ -9,23 +9,23 @@ steps:
entrypoint:
- bash
- -c
- |
set -euo pipefail
- >
set -euo pipefail;
mkdir -p ~/.ssh
mkdir -p ~/.ssh;
# ── Inject known-hosts and SSH key ───────────────────────────────
gcloud secrets versions access latest \
--secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev \
| base64 -d > ~/.ssh/known_hosts
chmod 644 ~/.ssh/known_hosts
| base64 -d > ~/.ssh/known_hosts;
chmod 644 ~/.ssh/known_hosts;
gcloud secrets versions access latest \
--secret=STAGING_SSH_KEY --project=aptivaai-dev \
| base64 -d > ~/.ssh/id_ed25519
chmod 600 ~/.ssh/id_ed25519
| base64 -d > ~/.ssh/id_ed25519;
chmod 600 ~/.ssh/id_ed25519;
echo "🔑 SSH prerequisites installed"
echo "🔑 SSH prerequisites installed";
# ── SSH into staging and deploy ──────────────────────────────────
ssh -o StrictHostKeyChecking=yes \
@ -34,22 +34,20 @@ steps:
'set -euo pipefail; \
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \
export IMG_TAG; \
STRIPE_SECRET_KEY=$(gcloud secrets versions access latest --secret=STRIPE_SECRET_KEY --project=aptivaai-dev); \
export STRIPE_SECRET_KEY; \
STRIPE_PUBLISHABLE_KEY=$(gcloud secrets versions access latest --secret=STRIPE_PUBLISHABLE_KEY --project=aptivaai-dev); \
export STRIPE_PUBLISHABLE_KEY; \
echo "📦 IMG_TAG=$IMG_TAG"; \
echo "💳 STRIPE_SECRET_KEY length = $(echo -n "$STRIPE_SECRET_KEY" | wc -c)"; \
echo "💳 STRIPE_PUBLISHABLE_KEY length = $(echo -n \"$STRIPE_PUBLISHABLE_KEY\" | wc -c)"; \
cd /home/jcoakley/aptiva-staging-app; \
echo "→ Pulling containers"; \
sudo --preserve-env=IMG_TAG,STRIPE_SECRET_KEY docker compose pull; \
echo "→ Recreating services"; \
sudo --preserve-env=IMG_TAG,STRIPE_SECRET_KEY docker compose up -d --force-recreate --remove-orphans; \
sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose pull; \
sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose up -d --force-recreate --remove-orphans; \
echo "✅ Staging stack refreshed with tag $IMG_TAG"'
secrets:
- STAGING_SSH_KEY
- STAGING_KNOWN_HOSTS
- IMG_TAG
- STRIPE_SECRET_KEY
- STRIPE_PUBLISHABLE_KEY
when:
event: