zydronium/google-nomulus
1
0
Fork 0
mirror of https://github.com/google/nomulus.git synced 2025-04-30 03:57:51 +02:00
Code Issues Projects Releases Packages Wiki Activity

Use the service account credential to delete unused versions (#1484)

Browse source
This commit is contained in:
Lai Jiang 2022-01-07 11:06:19 -05:00 • committed by GitHub
parent 6cfe4ddf4f
commit 7763e8e95a
1 changed files with 14 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
release/cloudbuild-delete.yaml
View file

@ -19,11 +19,21 @@
# expanded in the copies sent to Spinnaker, we preserve the brackets around # expanded in the copies sent to Spinnaker, we preserve the brackets around
# them for safe pattern matching during release. # them for safe pattern matching during release.
# See https://github.com/spinnaker/spinnaker/issues/3028 for more information. # See https://github.com/spinnaker/spinnaker/issues/3028 for more information.
steps: #
# Delete unused GAE versions.
# GAE has a limit of ~250 versions per-project, including unused versions. We # GAE has a limit of ~250 versions per-project, including unused versions. We
# therefore need to periodically delete old versions. This GCB job finds all # therefore need to periodically delete old versions. This GCB job finds all
# stopped versions and delete all but the last 3 (in case we need to rollback). # stopped versions and delete all but the last 3 (in case we need to rollback).
steps:
# Pull the credential for nomulus tool.
- name: 'gcr.io/$PROJECT_ID/builder:latest'
entrypoint: /bin/bash
args:
- -c
- |
set -e
gcloud secrets versions access latest \
--secret nomulus-tool-cloudbuild-credential > tool-credential.json
# Delete unused GAE versions.
- name: 'gcr.io/$PROJECT_ID/builder:latest' - name: 'gcr.io/$PROJECT_ID/builder:latest'
entrypoint: /bin/bash entrypoint: /bin/bash
args: args:
@ -36,6 +46,8 @@ steps:
project_id="domain-registry-${_ENV}" project_id="domain-registry-${_ENV}"
fi fi
gcloud auth activate-service-account --key-file=tool-credential.json
for service in default pubapi backend tools for service in default pubapi backend tools
do do
for version in $(gcloud app versions list \ for version in $(gcloud app versions list \