125 lines
3.9 KiB
Bash
Executable File
125 lines
3.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
ROOT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "${ROOT_DIR}"
|
|
|
|
if [[ -n "$(git status --porcelain)" ]]; then
|
|
echo "ERROR: Git working directory is not clean. Aborting." >&2
|
|
git status
|
|
exit 1
|
|
fi
|
|
echo "==> Git working directory is clean."
|
|
|
|
PROJECT_ID="propane-will-491900-m5"
|
|
REGION="us-central1"
|
|
REPOSITORY="us-central1-docker.pkg.dev/${PROJECT_ID}/osvauco-repo"
|
|
MCP_SERVICE="opax-mcp"
|
|
MCP_IMAGE="${REPOSITORY}/opax-mcp"
|
|
|
|
# This is now aligned with opax-mcp.yaml
|
|
MCP_OLLAMA_BASE_URL="http://10.128.0.15:11434"
|
|
COMMIT_SHA=$(git rev-parse --short HEAD)
|
|
|
|
|
|
echo "==> Submitting MCP Cloud Build"
|
|
|
|
BUILD_ID="$(
|
|
gcloud builds submit \
|
|
--async \
|
|
--project="${PROJECT_ID}" \
|
|
--region="${REGION}" \
|
|
--config="cloudbuild.build-only.yaml" \
|
|
--format="value(id)" \
|
|
.
|
|
)"
|
|
|
|
if [[ -z "${BUILD_ID}" ]]; then
|
|
echo "ERROR: Cloud Build did not return a build ID." >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "==> Cloud Build ID: ${BUILD_ID}"
|
|
echo "==> Streaming Cloud Build logs"
|
|
|
|
set +e
|
|
gcloud builds log "${BUILD_ID}" \
|
|
--project="${PROJECT_ID}" \
|
|
--region="${REGION}" \
|
|
--stream
|
|
BUILD_LOG_EXIT_CODE=$?
|
|
set -e
|
|
|
|
BUILD_STATUS="$(
|
|
gcloud builds describe "${BUILD_ID}" \
|
|
--project="${PROJECT_ID}" \
|
|
--region="${REGION}" \
|
|
--format="value(status)"
|
|
)"
|
|
|
|
if [[ "${BUILD_STATUS}" != "SUCCESS" ]]; then
|
|
echo "ERROR: Cloud Build did not succeed. Status: ${BUILD_STATUS}. Aborting deploy." >&2
|
|
exit 1
|
|
fi
|
|
echo "==> Cloud Build status: SUCCESS."
|
|
|
|
IMAGE_REF="$(
|
|
gcloud builds describe "${BUILD_ID}" \
|
|
--project="${PROJECT_ID}" \
|
|
--region="${REGION}" \
|
|
--format="value(results.images[0].name)"
|
|
)"
|
|
|
|
if [[ -z "${IMAGE_REF}" ]]; then
|
|
IMAGE_REF="${MCP_IMAGE}:${BUILD_ID}"
|
|
fi
|
|
|
|
if [[ "${IMAGE_REF}" == *@sha256:* ]]; then
|
|
DEPLOY_IMAGE="${IMAGE_REF}"
|
|
else
|
|
IMAGE_DIGEST="$(
|
|
gcloud artifacts docker images describe "${IMAGE_REF}" \
|
|
--project="${PROJECT_ID}" \
|
|
--format="value(image_summary.digest)"
|
|
)"
|
|
|
|
if [[ -z "${IMAGE_DIGEST}" ]]; then
|
|
echo "ERROR: No pushed MCP image digest was found." >&2
|
|
echo "Cloud Build status: ${BUILD_STATUS}" >&2
|
|
echo "Cloud Build log exit code: ${BUILD_LOG_EXIT_CODE}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
DEPLOY_IMAGE="${MCP_IMAGE}@${IMAGE_DIGEST}"
|
|
fi
|
|
|
|
echo "==> Deploying immutable MCP image:"
|
|
echo "${DEPLOY_IMAGE}"
|
|
|
|
gcloud run deploy "${MCP_SERVICE}" \
|
|
--project="${PROJECT_ID}" \
|
|
--region="${REGION}" \
|
|
--image="${DEPLOY_IMAGE}" \
|
|
--tag="candidate-${COMMIT_SHA}" \
|
|
--no-traffic \
|
|
--service-account="jason-vauger@propane-will-491900-m5.iam.gserviceaccount.com" \
|
|
--port="8080" \
|
|
--min-instances="0" \
|
|
--max-instances="5" \
|
|
--cpu="1" \
|
|
--memory="512Mi" \
|
|
--concurrency="80" \
|
|
--timeout="60" \
|
|
--network="default" \
|
|
--subnet="default" \
|
|
--vpc-egress="private-ranges-only" \
|
|
--update-env-vars="^|^GOOGLE_CLOUD_PROJECT=propane-will-491900-m5|OLLAMA_BASE_URL=http://10.128.0.15:11434|EMMA_MODEL=gemma3:4b|EMMA_FAST_MODEL=gemma3:4b|EMMA_LIGHT_MODEL=qwen2.5:3b|GITEA_URL=https://git.vauco.no|GITEA_REPO=chris/OSVauco|STATIC_BUCKET=opax-vauco-static|CLOUD_RUN_SERVICE=osvauco-agent|CLOUD_BUILD_TRIGGER_ID=38423976-91ff-4ff4-859e-1f262344c609|OPAX_IAP_CLIENT_ID=357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com|GMAIL_DEFAULT_SENDER=jason.vauger@vauco.no|GMAIL_ALLOWED_SENDERS=jason.vauger@vauco.no,emma.vauger@vauco.no|OSVAUCO_AGENT_URL=https://osvauco-agent-357036551735.us-central1.run.app" \
|
|
--update-secrets="GITEA_TOKEN=gitea-token:latest,INTERNAL_API_KEY=INTERNAL_API_KEY:latest,MCP_SECRET=mcp-server-key:latest,TWILIO_ACCOUNT_SID=TWILIO_ACCOUNT_SID:latest,TWILIO_AUTH_TOKEN=TWILIO_AUTH_TOKEN:latest,TWILIO_FROM_NUMBER=TWILIO_FROM_NUMBER:latest" \
|
|
--quiet
|
|
|
|
echo
|
|
echo "==> Candidate revision created successfully."
|
|
echo "Candidate tag: candidate-${COMMIT_SHA}"
|
|
echo
|
|
echo "No production traffic has been promoted."
|
|
echo "Next steps: Perform health and smoke tests against the candidate URL, then promote traffic manually." |