removed privileged:true
Some checks failed
ci/woodpecker/manual/woodpecker Pipeline failed

This commit is contained in:
Josh 2025-09-12 15:19:38 +00:00
parent dc63732e4c
commit 4d84b7a593

View File

@ -6,7 +6,6 @@ name: prod-promotion
steps: steps:
- name: promote-tag-and-mirror - name: promote-tag-and-mirror
image: google/cloud-sdk:latest image: google/cloud-sdk:latest
privileged: true
entrypoint: entrypoint:
- bash - bash
- -c - -c
@ -41,7 +40,6 @@ steps:
echo "🏷 Promoted IMG_TAG=${IMG_TAG} → aptivaai-prod & mirrored images" echo "🏷 Promoted IMG_TAG=${IMG_TAG} → aptivaai-prod & mirrored images"
- name: verify-sync - name: verify-sync
privileged: true
depends_on: [promote-tag-and-mirror] depends_on: [promote-tag-and-mirror]
image: google/cloud-sdk:latest image: google/cloud-sdk:latest
entrypoint: entrypoint:
@ -65,7 +63,6 @@ steps:
echo "✅ Prod AR has all images at :$IMG_TAG" echo "✅ Prod AR has all images at :$IMG_TAG"
- name: security-scan - name: security-scan
privileged: true
depends_on: [verify-sync] depends_on: [verify-sync]
image: google/cloud-sdk:latest image: google/cloud-sdk:latest
entrypoint: entrypoint:
@ -94,7 +91,6 @@ steps:
trivy image --username oauth2accesstoken --password "$TOKEN" --scanners vuln --ignore-unfixed --ignorefile .trivyignore --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG" trivy image --username oauth2accesstoken --password "$TOKEN" --scanners vuln --ignore-unfixed --ignorefile .trivyignore --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG"
- name: prod-deploy - name: prod-deploy
privileged: true
depends_on: [security-scan] depends_on: [security-scan]
image: google/cloud-sdk:latest image: google/cloud-sdk:latest
entrypoint: entrypoint: