jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipeline build v44. reverted and add single GCP secret

Browse Source
This commit is contained in:
Josh 2025-07-31 17:13:13 +00:00
parent ee2ffe9f12
commit 3e292b8522
1 changed files with 15 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
.woodpecker.yml
View File

@ -1,7 +1,7 @@
--- ---
kind: pipeline kind: pipeline
type: docker type: docker
name: ssh-deploy-test name: ssh-test
steps: steps:
- name: ssh-test - name: ssh-test
@ -9,23 +9,23 @@ steps:
entrypoint: entrypoint:
- bash - bash
- -c - -c
- | - >
set -euo pipefail set -euo pipefail;
mkdir -p ~/.ssh mkdir -p ~/.ssh;
# ── Inject known-hosts and SSH key ─────────────────────────────── # ── Inject known-hosts and SSH key ───────────────────────────────
gcloud secrets versions access latest \ gcloud secrets versions access latest \
--secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev \ --secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev \
| base64 -d > ~/.ssh/known_hosts | base64 -d > ~/.ssh/known_hosts;
chmod 644 ~/.ssh/known_hosts chmod 644 ~/.ssh/known_hosts;
gcloud secrets versions access latest \ gcloud secrets versions access latest \
--secret=STAGING_SSH_KEY --project=aptivaai-dev \ --secret=STAGING_SSH_KEY --project=aptivaai-dev \
| base64 -d > ~/.ssh/id_ed25519 | base64 -d > ~/.ssh/id_ed25519;
chmod 600 ~/.ssh/id_ed25519 chmod 600 ~/.ssh/id_ed25519;
echo "🔑 SSH prerequisites installed" echo "🔑 SSH prerequisites installed";
# ── SSH into staging and deploy ────────────────────────────────── # ── SSH into staging and deploy ──────────────────────────────────
ssh -o StrictHostKeyChecking=yes \ ssh -o StrictHostKeyChecking=yes \
@ -34,22 +34,20 @@ steps:
'set -euo pipefail; \ 'set -euo pipefail; \
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \ IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \
export IMG_TAG; \ export IMG_TAG; \
STRIPE_SECRET_KEY=$(gcloud secrets versions access latest --secret=STRIPE_SECRET_KEY --project=aptivaai-dev); \ STRIPE_PUBLISHABLE_KEY=$(gcloud secrets versions access latest --secret=STRIPE_PUBLISHABLE_KEY --project=aptivaai-dev); \
export STRIPE_SECRET_KEY; \ export STRIPE_PUBLISHABLE_KEY; \
echo "📦 IMG_TAG=$IMG_TAG"; \ echo "📦 IMG_TAG=$IMG_TAG"; \
echo "💳 STRIPE_SECRET_KEY length = $(echo -n "$STRIPE_SECRET_KEY" | wc -c)"; \ echo "💳 STRIPE_PUBLISHABLE_KEY length = $(echo -n \"$STRIPE_PUBLISHABLE_KEY\" | wc -c)"; \
cd /home/jcoakley/aptiva-staging-app; \ cd /home/jcoakley/aptiva-staging-app; \
echo "→ Pulling containers"; \ sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose pull; \
sudo --preserve-env=IMG_TAG,STRIPE_SECRET_KEY docker compose pull; \ sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose up -d --force-recreate --remove-orphans; \
echo "→ Recreating services"; \
sudo --preserve-env=IMG_TAG,STRIPE_SECRET_KEY docker compose up -d --force-recreate --remove-orphans; \
echo "✅ Staging stack refreshed with tag $IMG_TAG"' echo "✅ Staging stack refreshed with tag $IMG_TAG"'
secrets: secrets:
- STAGING_SSH_KEY - STAGING_SSH_KEY
- STAGING_KNOWN_HOSTS - STAGING_KNOWN_HOSTS
- IMG_TAG - IMG_TAG
- STRIPE_SECRET_KEY - STRIPE_PUBLISHABLE_KEY
when: when:
event: event: