---
steps:
  - name: deploy-staging
    image: gcr.io/google.com/cloudsdktool/cloud-sdk:latest
    commands:
      - |
        set -eu
        mkdir -p ~/.ssh

        # Inject SSH key directly
        gcloud secrets versions access latest \
          --secret="STAGING_KNOWN_HOSTS" \
          --project="aptivaai-dev" | base64 -d > ~/.ssh/known_hosts

        chmod 600 ~/.ssh/id_ed25519

        # Sanity check: perform handshake
        ssh -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=yes jcoakley@10.128.0.12 hostname