jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

inline
Some checks failed
ci/woodpecker/manual/woodpecker Pipeline failed
Details

Browse Source
This commit is contained in:
Josh 2025-09-13 11:22:36 +00:00
parent 9a83d1c772
commit bdcb70cabf
1 changed files with 10 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
.woodpecker.yml
View File

@ -112,7 +112,6 @@ steps:
[[ "${PROMOTE:-}" == "prod" ]] || { echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; } [[ "${PROMOTE:-}" == "prod" ]] || { echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; }
mkdir -p ~/.ssh mkdir -p ~/.ssh
gcloud secrets versions access latest \ gcloud secrets versions access latest \
--secret=PROD_SSH_KEY --project=aptivaai-dev \ --secret=PROD_SSH_KEY --project=aptivaai-dev \
| base64 -d > ~/.ssh/id_ed25519 | base64 -d > ~/.ssh/id_ed25519
@ -124,21 +123,20 @@ steps:
echo "🔑 SSH prerequisites installed" echo "🔑 SSH prerequisites installed"
echo "🚀 Deploying tag $IMG_TAG to prod server $PROD_SSH_TARGET" echo "🚀 Deploying tag $IMG_TAG to prod server $PROD_SSH_TARGET"
cat <<EOSSH | ssh -T \ ssh -T \
-o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \ -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \
--project=aptivaai-prod --zone=us-central1-a \ --project=aptivaai-prod --zone=us-central1-a \
--listen-on-stdin --verbosity=error" \ --listen-on-stdin --verbosity=error" \
-o StrictHostKeyChecking=accept-new \ -o StrictHostKeyChecking=accept-new \
-i ~/.ssh/id_ed25519 \ -i ~/.ssh/id_ed25519 \
"$PROD_SSH_TARGET" bash -s -- "$IMG_TAG" "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG" <<'EOF'
set -euo pipefail
IMG_TAG="${1:?IMG_TAG arg missing}"
export IMG_TAG
set -euo pipefail PROJECT=aptivaai-prod
IMG_TAG="\${1:?IMG_TAG arg missing}" ENV=prod
export IMG_TAG export PROJECT ENV
PROJECT=aptivaai-prod
ENV=prod
export PROJECT ENV
# Pull runtime secrets (unchanged list) # Pull runtime secrets (unchanged list)
JWT_SECRET="$(gcloud secrets versions access latest --secret=JWT_SECRET_$ENV --project="$PROJECT")"; export JWT_SECRET JWT_SECRET="$(gcloud secrets versions access latest --secret=JWT_SECRET_$ENV --project="$PROJECT")"; export JWT_SECRET