From 3e724c09673d959f987fd53f4f596f3235f6183b Mon Sep 17 00:00:00 2001
From: Josh <jcoakley@aptivaai.com>
Date: Thu, 31 Jul 2025 15:59:21 +0000
Subject: [PATCH] pipeline build v28 - steps readded

---
 .woodpecker.yml | 78 ++++++++++++++++++++++++-------------------------
 1 file changed, 39 insertions(+), 39 deletions(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 0c1eec9..10e1128 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -1,47 +1,47 @@
-- name: ssh-test
-  image: google/cloud-sdk:latest
-  entrypoint:
-    - bash
-    - -c
-    - |
-      set -euo pipefail
+steps:
+  - name: ssh-test
+    image: google/cloud-sdk:latest
+    entrypoint:
+      - bash
+      - -c
+      - |
+        set -euo pipefail
 
-      mkdir -p ~/.ssh
+        mkdir -p ~/.ssh
 
-      # ── Inject known-hosts and SSH key ───────────────────────────────
-      gcloud secrets versions access latest \
-        --secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev \
-        | base64 -d > ~/.ssh/known_hosts
-      chmod 644 ~/.ssh/known_hosts
+        # ── Inject known-hosts and SSH key ───────────────────────────────
+        gcloud secrets versions access latest \
+          --secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev \
+          | base64 -d > ~/.ssh/known_hosts
+        chmod 644 ~/.ssh/known_hosts
 
-      gcloud secrets versions access latest \
-        --secret=STAGING_SSH_KEY --project=aptivaai-dev \
-        | base64 -d > ~/.ssh/id_ed25519
-      chmod 600 ~/.ssh/id_ed25519
+        gcloud secrets versions access latest \
+          --secret=STAGING_SSH_KEY --project=aptivaai-dev \
+          | base64 -d > ~/.ssh/id_ed25519
+        chmod 600 ~/.ssh/id_ed25519
 
-      echo "🔑 SSH prerequisites installed"
+        echo "🔑 SSH prerequisites installed"
 
-      # ── Fetch canonical IMG_TAG ──────────────────────────────────────
-      IMG_TAG=$(gcloud secrets versions access latest \
-        --secret=IMG_TAG --project=aptivaai-dev)
-      echo "📦 IMG_TAG=${IMG_TAG}"
+        # ── Fetch canonical IMG_TAG ──────────────────────────────────────
+        IMG_TAG=$(gcloud secrets versions access latest \
+          --secret=IMG_TAG --project=aptivaai-dev)
+        echo "📦 IMG_TAG=${IMG_TAG}"
 
-      # ── SSH into staging and deploy ──────────────────────────────────
-      ssh -o StrictHostKeyChecking=yes \
-          -i ~/.ssh/id_ed25519 \
-          jcoakley@10.128.0.12 \
-          "export IMG_TAG=${IMG_TAG}; \
-           cd /home/jcoakley/aptiva-staging-app; \
-           echo 'IMG_TAG = ${IMG_TAG}'; \
-           docker compose pull; \
-           docker compose up -d --force-recreate --remove-orphans; \
-           echo '✅ Staging stack refreshed with tag ${IMG_TAG}'"
+        # ── SSH into staging and deploy ──────────────────────────────────
+        ssh -o StrictHostKeyChecking=yes \
+            -i ~/.ssh/id_ed25519 \
+            jcoakley@10.128.0.12 \
+            "export IMG_TAG=${IMG_TAG}; \
+             cd /home/jcoakley/aptiva-staging-app; \
+             echo 'IMG_TAG = ${IMG_TAG}'; \
+             sudo --preserve-env=IMG_TAG docker compose pull; \
+             sudo --preserve-env=IMG_TAG docker compose up -d --force-recreate --remove-orphans; \
+             echo '✅ Staging stack refreshed with tag ${IMG_TAG}'"
 
-secrets:
-  - STAGING_SSH_KEY
-  - STAGING_KNOWN_HOSTS
+    secrets:
+      - STAGING_SSH_KEY
+      - STAGING_KNOWN_HOSTS
 
-
-when:
-  event:
-    - push
+    when:
+      event:
+        - push