diff --git a/.woodpecker.yml b/.woodpecker.yml index d3ad556..a60095a 100644 --- a/.woodpecker.yml +++ b/.woodpecker.yml @@ -108,6 +108,14 @@ steps: - bash - -c - | + + -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \ + --project=aptivaai-prod --zone=us-central1-a \ + --listen-on-stdin --verbosity=error" \ + -o StrictHostKeyChecking=accept-new \ + -i ~/.ssh/id_ed25519 \ + "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG" + set -euo pipefail [[ "${PROMOTE:-}" == "prod" ]] || { echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; } @@ -185,15 +193,7 @@ steps: docker compose up -d --force-recreate --remove-orphans echo "✅ Prod stack refreshed with tag $IMG_TAG" - ' | ssh -T \ - -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \ - --project=aptivaai-prod --zone=us-central1-a \ - --listen-on-stdin --verbosity=error" \ - -o StrictHostKeyChecking=accept-new \ - -i ~/.ssh/id_ed25519 \ - "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG" - - + secrets: - PROD_SSH_KEY - PROD_SSH_TARGET