fail pipeline when vault is not created properly

bcgov · Nov 12, 2024 · 3102901 · 3102901
1 parent 3ef95fd
commit 3102901
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 2 deletions.
diff --git a/.github/actions/backend-deploy-job/files/cloudbuild.yaml b/.github/actions/backend-deploy-job/files/cloudbuild.yaml
@@ -37,7 +37,11 @@ steps:
 
       for env_name in "${targets[@]}"; do
         export APP_ENV=${env_name}
-        op inject  -f -i ./devops/vaults.gcp.env -o ./devops/vaults.${env_name}
+
+        if [[ -z "$(op inject -f -i ./devops/vaults.gcp.env -o ./devops/vaults.${env_name})" ]]; then
+           echo "Error: failed to generate secrets via 1password vault." >&2
+           exit 1
+        fi
 
         export VPC_CONNECTOR=$(awk -F '=' '/^VPC_CONNECTOR/ {print $2}' ./devops/vaults.${env_name})
         export VAL=$(awk '{f1=f2=$0; sub(/=.*/,"",f1); sub(/[^=]+=/,"",f2); printf "- name: %s\n  value: %s\n",f1,f2}' ./devops/vaults.${env_name} | sed 's/\"/\"/g')

diff --git a/.github/actions/backend-deploy/files/cloudbuild.yaml b/.github/actions/backend-deploy/files/cloudbuild.yaml
@@ -19,7 +19,12 @@ steps:
       local env_name=$1
       export APP_ENV=${env_name}
       # Inject environment-specific variables
-      op inject -f -i ./devops/vaults.gcp.env -o "./devops/vaults.${env_name}"
+
+      if [[ -z "$(op inject -f -i ./devops/vaults.gcp.env -o ./devops/vaults.${env_name})" ]]; then
+         echo "Error: failed to generate secrets via 1password vault." >&2
+         exit 1
+      fi
+
 
       # Extract VPC connector and environment variables
       export VPC_CONNECTOR=$(awk -F '=' '/^VPC_CONNECTOR/ {print $2}' "./devops/vaults.${env_name}")