devnets/cloudbuild-push-main.yaml at main · ethereum-optimism/devnets · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
steps:
  - name: 'gcr.io/cloud-builders/git'
    secretEnv: ['SSH_KEY']
    entrypoint: 'bash'
    args:
    - -c
    - |
      echo "$$SSH_KEY" >> /root/.ssh/id_rsa
      chmod 400 /root/.ssh/id_rsa
      cp known_hosts.github /root/.ssh/known_hosts
    volumes:
    - name: 'ssh'
      path: /root/.ssh
  - name: gcr.io/cloud-builders/git
    entrypoint: 'bash'
    args:
      - '-c'
      - |
        git remote set-url origin git@github.com:ethereum-optimism/devnets.git
        git fetch --unshallow
    volumes:
    - name: 'ssh'
      path: /root/.ssh

  - name: us-docker.pkg.dev/oplabs-tools-artifacts/internal-images/netchef:main
    args: ["ci", "validate", "--devnets-dir", "."]
    env:
      - NETCHEF_GCP_PROJECT_DEV=oplabs-dev-ent-infra-us
      - NETCHEF_GCP_PROJECT_PROD=oplabs-prod-ent-infra-us
      - NETCHEF_GCP_PROJECT_STG=oplabs-stg-ent-infra-us
      - NETCHEF_REPO_URL=https://github.com/ethereum-optimism/devnets.git

  - name: us-docker.pkg.dev/oplabs-tools-artifacts/internal-images/netchef:main
    entrypoint: "ci-command-on-devnet-changes.sh"
    args: ["check-for-open-workflows"]
    env:
      - NETCHEF_TEMPORAL_HOST=us-central1.gcp.api.temporal.io:7233
      - NETCHEF_TEMPORAL_TASK_QUEUE=netchef-main-workflows
      - NETCHEF_TEMPORAL_NAMESPACE_PROD=oplabs-prod-ent-infra-netchef.nqbqu
      - NETCHEF_TEMPORAL_NAMESPACE_DEV=oplabs-dev-ent-infra-netchef.nqbqu
      - NETCHEF_TEMPORAL_NAMESPACE_STG=oplabs-stg-ent-infra-netchef.nqbqu
    secretEnv:
      - NETCHEF_TEMPORAL_API_KEY
      - NETCHEF_TEMPORAL_API_KEY_DEV
      - NETCHEF_TEMPORAL_API_KEY_PROD
      - NETCHEF_TEMPORAL_API_KEY_STG

  - name: us-docker.pkg.dev/oplabs-tools-artifacts/internal-images/netchef:main
    entrypoint: "ci-command-on-devnet-changes.sh"
    args: ["trigger-workflow"]
    env:
      - NETCHEF_GCP_PROJECT_DEV=oplabs-dev-ent-infra-us
      - NETCHEF_GCP_PROJECT_PROD=oplabs-prod-ent-infra-us
      - NETCHEF_GCP_PROJECT_STG=oplabs-stg-ent-infra-us
      - NETCHEF_REPO_URL=https://github.com/ethereum-optimism/devnets.git
      - NETCHEF_TEMPORAL_NAMESPACE_PROD=oplabs-prod-ent-infra-netchef.nqbqu
      - NETCHEF_TEMPORAL_NAMESPACE_DEV=oplabs-dev-ent-infra-netchef.nqbqu
      - NETCHEF_TEMPORAL_NAMESPACE_STG=oplabs-stg-ent-infra-netchef.nqbqu
      - NETCHEF_TEMPORAL_HOST=us-central1.gcp.api.temporal.io:7233
      - NETCHEF_TEMPORAL_TASK_QUEUE=netchef-main-workflows
      - NETCHEF_TRIGGERING_COMMIT_SHA=$COMMIT_SHA
    secretEnv:
      - NETCHEF_TEMPORAL_API_KEY
      - NETCHEF_TEMPORAL_API_KEY_DEV
      - NETCHEF_TEMPORAL_API_KEY_PROD
      - NETCHEF_TEMPORAL_API_KEY_STG

availableSecrets:
  secretManager:
    - versionName: projects/oplabs-tools-secrets/secrets/netchef-cloudbuild-dev-temporal-api-key/versions/latest
      env: NETCHEF_TEMPORAL_API_KEY_DEV
    - versionName: projects/oplabs-tools-secrets/secrets/netchef-cloudbuild-prod-temporal-api-key/versions/latest
      env: NETCHEF_TEMPORAL_API_KEY_PROD
    - versionName: projects/oplabs-tools-secrets/secrets/netchef-cloudbuild-stg-temporal-api-key/versions/latest
      env: NETCHEF_TEMPORAL_API_KEY_STG
    - versionName: projects/oplabs-tools-secrets/secrets/netchef-cloudbuild-env/versions/latest
      env: NETCHEF_TEMPORAL_API_KEY
    - versionName: projects/oplabs-tools-secrets/secrets/netchef-cloudbuild-devnets-private-ssh-key/versions/latest
      env: SSH_KEY
options:
  logging: CLOUD_LOGGING_ONLY
  pool:
    name: projects/oplabs-tools-infra/locations/us-central1/workerPools/private-pool-small