steps:
  ssh-test:
    image: google/cloud-sdk:latest
    commands:
      - set -eu
      - mkdir -p ~/.ssh

      # Pull and decode known hosts
      - gcloud secrets versions access latest \
          --secret="STAGING_KNOWN_HOSTS" \
          --project="aptivaai-dev" | base64 -d > ~/.ssh/known_hosts
      - chmod 644 ~/.ssh/known_hosts

      # Pull private key
      - gcloud secrets versions access latest \
          --secret="STAGING_SSH_KEY" \
          --project="aptivaai-dev" > ~/.ssh/id_ed25519
      - chmod 600 ~/.ssh/id_ed25519

      # SSH test with verbose logging
      - ssh -vvv -i ~/.ssh/id_ed25519 \
          -o StrictHostKeyChecking=yes \
          jcoakley@10.128.0.12 hostname