---
steps:
  - name: deploy-staging
    image: gcr.io/google.com/cloudsdktool/cloud-sdk:latest
    commands:
      - |
        set -eu
        mkdir -p ~/.ssh
        gcloud secrets versions access latest --secret="KNOWN_HOSTS_B64" --project="aptivaai-dev" | base64 -d > ~/.ssh/known_hosts
        chmod 644 ~/.ssh/known_hosts
        gcloud secrets versions access latest --secret="STAGING_SSH_KEY_B64" --project="aptivaai-dev" | base64 -d > ~/.ssh/id_ed25519
        chmod 600 ~/.ssh/id_ed25519
        ssh -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=yes jcoakley@10.128.0.12 <<EOF
          set -eu
          cd /opt/aptiva-staging-app
          IMG_TAG=$(echo "$CI_COMMIT_SHA" | head -c 8)
          IMG_TAG=$IMG_TAG docker compose pull
          IMG_TAG=$IMG_TAG docker compose up -d --force-recreate --remove-orphans
        EOF