This commit is contained in:
parent
2bb907644a
commit
db16841a8b
@ -133,12 +133,12 @@ steps:
|
|||||||
--project=aptivaai-prod --zone=us-central1-a \
|
--project=aptivaai-prod --zone=us-central1-a \
|
||||||
--listen-on-stdin --verbosity=error" \
|
--listen-on-stdin --verbosity=error" \
|
||||||
-o StrictHostKeyChecking=accept-new -i ~/.ssh/id_ed25519 \
|
-o StrictHostKeyChecking=accept-new -i ~/.ssh/id_ed25519 \
|
||||||
"$PROD_SSH_TARGET" \
|
"$PROD_SSH_TARGET" "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG" \
|
||||||
set -euo pipefail; \
|
set -euo pipefail; \
|
||||||
|
IMG_TAG="${1:?IMG_TAG arg missing}"; export IMG_TAG
|
||||||
PROJECT=aptivaai-prod; \
|
PROJECT=aptivaai-prod; \
|
||||||
export PROJECT; \
|
export PROJECT; \
|
||||||
ENV=prod; \
|
ENV=prod; \
|
||||||
export IMG_TAG='"$IMG_TAG"'; \
|
|
||||||
# sanity: ensure prod SM matches the single source (dev) before pull
|
# sanity: ensure prod SM matches the single source (dev) before pull
|
||||||
prod_val=$(gcloud secrets versions access latest --secret=IMG_TAG --project=$PROJECT); \
|
prod_val=$(gcloud secrets versions access latest --secret=IMG_TAG --project=$PROJECT); \
|
||||||
[ "$prod_val" = "$IMG_TAG" ] || { echo "❌ Prod SM IMG_TAG ($prod_val) != dev IMG_TAG ($IMG_TAG)"; exit 1; }; \
|
[ "$prod_val" = "$IMG_TAG" ] || { echo "❌ Prod SM IMG_TAG ($prod_val) != dev IMG_TAG ($IMG_TAG)"; exit 1; }; \
|
||||||
|
Loading…
Reference in New Issue
Block a user