jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipeline build v29 - inject inside SSH

Browse Source
This commit is contained in:
Josh 2025-07-31 16:02:30 +00:00
parent 3e724c0967
commit f61c19a416
1 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
.woodpecker.yml
View File

@ -22,21 +22,19 @@ steps:
echo "🔑 SSH prerequisites installed" echo "🔑 SSH prerequisites installed"
# ── Fetch canonical IMG_TAG ──────────────────────────────────────
IMG_TAG=$(gcloud secrets versions access latest \
--secret=IMG_TAG --project=aptivaai-dev)
echo "📦 IMG_TAG=${IMG_TAG}"
# ── SSH into staging and deploy ────────────────────────────────── # ── SSH into staging and deploy ──────────────────────────────────
ssh -o StrictHostKeyChecking=yes \ ssh -o StrictHostKeyChecking=yes \
-i ~/.ssh/id_ed25519 \ -i ~/.ssh/id_ed25519 \
jcoakley@10.128.0.12 \ jcoakley@10.128.0.12 \
"export IMG_TAG=${IMG_TAG}; \ 'set -euo pipefail; \
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \
export IMG_TAG; \
echo "📦 IMG_TAG=$IMG_TAG"; \
cd /home/jcoakley/aptiva-staging-app; \ cd /home/jcoakley/aptiva-staging-app; \
echo 'IMG_TAG = ${IMG_TAG}'; \ echo "IMG_TAG = $IMG_TAG"; \
sudo --preserve-env=IMG_TAG docker compose pull; \ sudo --preserve-env=IMG_TAG docker compose pull; \
sudo --preserve-env=IMG_TAG docker compose up -d --force-recreate --remove-orphans; \ sudo --preserve-env=IMG_TAG docker compose up -d --force-recreate --remove-orphans; \
echo '✅ Staging stack refreshed with tag ${IMG_TAG}'" echo "✅ Staging stack refreshed with tag $IMG_TAG"'
secrets: secrets:
- STAGING_SSH_KEY - STAGING_SSH_KEY