Skip to content

Conversation

@davidagustin
Copy link
Member

@davidagustin davidagustin commented Oct 30, 2025

…CT_REGISTRY_KEY


Note

Publishes images to both Docker Hub and Google Artifact Registry in CI and release workflows.

  • Adds GCP_REPO and configures google-github-actions/auth + docker/login-action for us-west2-docker.pkg.dev
  • Updates ci.yml publish-latest to tag/push ${DOCKER_REPO}:latest and ${GCP_REPO}:latest
  • Updates publish-release.yml to generate tags for both ${GCP_REPO} and ${DOCKER_REPO} and push to both registries
  • Adds .dockerignore rule to exclude gha-creds-*.json

Written by Cursor Bugbot for commit fad8666. This will update automatically on new commits. Configure here.

@davidagustin
Copy link
Member Author

So while building the container, the step:
uses: google-github-actions/auth@v2" and "with:
credentials_json: ${{ secrets.GCP_ARTIFACT_REGISTRY_KEY }}",
creates
gha-creds-*.json
in the current directory so it can be reused,
We need to add it to .dockerignore to prevent the credential from being included into the image when it's being built
The reason why we have to manually do this is explained in:
google-github-actions/auth#123 and google-github-actions/auth#497

cursor[bot]

This comment was marked as outdated.

Comment on lines 13 to 20
touch /var/lib/dpkg/status && \
curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && \
wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | apt-key add - && \
mv /home/app/webapp/config/appserver.sh /etc/service/appserver/run && \
chmod 777 /etc/service/appserver/run && \
echo 'deb http://apt.postgresql.org/pub/repos/apt/ focal-pgdg main' > /etc/apt/sources.list.d/pgdg.list && \
curl --silent https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - && \
apt-get update && \
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's kind of hard for me to review any of the changes in this file, since there are a lot of changes, and it's not exactly clear what issues you were working around. I'm assuming that you were hitting some issues with the Docker image build, where some of the packages were out of date, since that's a common issue we hit every now and then. I'd like to ask you to do the following things:

  1. Could you split this out into its own PR? That way, if we need to revert the GCP changes, we don't have to also revert the Dockerfile changes, and vice versa
  2. Could you try making the minimum number of changes necessary to this file? It's a bit of a code smell to me that your changes add 5x the number of lines that there were previously, and even if many of those lines are comments, it still feels like there's probably more happening here than necessary.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok will do

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since #763 has merged with an alternative fix, I think you can revert all the changes you made to the Dockerfile now. Once you do that, then I think this PR can probably merge. Thanks again for working on it!

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR is being reviewed by Cursor Bugbot

Details

You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

on:
push:
branches: [ master ]
branches: [ master, migrate-to-gcp ]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, and this is a reminder to go revert this change and all other changes for allowing you to test the actual deploy flow on this branch.

Copy link
Member

@richardxia richardxia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@davidagustin davidagustin merged commit 3ed379c into master Jan 15, 2026
5 checks passed
@davidagustin davidagustin deleted the migrate-to-gcp branch January 15, 2026 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants