This commit is contained in:
parent
dc63732e4c
commit
4d84b7a593
@ -6,7 +6,6 @@ name: prod-promotion
|
|||||||
steps:
|
steps:
|
||||||
- name: promote-tag-and-mirror
|
- name: promote-tag-and-mirror
|
||||||
image: google/cloud-sdk:latest
|
image: google/cloud-sdk:latest
|
||||||
privileged: true
|
|
||||||
entrypoint:
|
entrypoint:
|
||||||
- bash
|
- bash
|
||||||
- -c
|
- -c
|
||||||
@ -41,7 +40,6 @@ steps:
|
|||||||
echo "🏷 Promoted IMG_TAG=${IMG_TAG} → aptivaai-prod & mirrored images"
|
echo "🏷 Promoted IMG_TAG=${IMG_TAG} → aptivaai-prod & mirrored images"
|
||||||
|
|
||||||
- name: verify-sync
|
- name: verify-sync
|
||||||
privileged: true
|
|
||||||
depends_on: [promote-tag-and-mirror]
|
depends_on: [promote-tag-and-mirror]
|
||||||
image: google/cloud-sdk:latest
|
image: google/cloud-sdk:latest
|
||||||
entrypoint:
|
entrypoint:
|
||||||
@ -65,7 +63,6 @@ steps:
|
|||||||
echo "✅ Prod AR has all images at :$IMG_TAG"
|
echo "✅ Prod AR has all images at :$IMG_TAG"
|
||||||
|
|
||||||
- name: security-scan
|
- name: security-scan
|
||||||
privileged: true
|
|
||||||
depends_on: [verify-sync]
|
depends_on: [verify-sync]
|
||||||
image: google/cloud-sdk:latest
|
image: google/cloud-sdk:latest
|
||||||
entrypoint:
|
entrypoint:
|
||||||
@ -94,7 +91,6 @@ steps:
|
|||||||
trivy image --username oauth2accesstoken --password "$TOKEN" --scanners vuln --ignore-unfixed --ignorefile .trivyignore --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG"
|
trivy image --username oauth2accesstoken --password "$TOKEN" --scanners vuln --ignore-unfixed --ignorefile .trivyignore --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG"
|
||||||
|
|
||||||
- name: prod-deploy
|
- name: prod-deploy
|
||||||
privileged: true
|
|
||||||
depends_on: [security-scan]
|
depends_on: [security-scan]
|
||||||
image: google/cloud-sdk:latest
|
image: google/cloud-sdk:latest
|
||||||
entrypoint:
|
entrypoint:
|
||||||
|
Loading…
Reference in New Issue
Block a user