| #!/bin/bash |
| |
| PROJECT_ID="mendel-linux-cloud-infra" |
| KEYRING_NAME="mendel-linux-signing-key" |
| PASSPHRASE_NAME="mendel-linux-signing-key-passphrase" |
| |
| set -e |
| |
| echo "Fetching Mendel release credentials" |
| |
| install -d -m 700 $HOME/.gke-jenkins/ |
| install -d -m 700 $HOME/.gke-jenkins/release-credentials |
| |
| gcloud --project=mendel-linux-cloud-infra \ |
| secrets versions access latest --secret="${KEYRING_NAME}" \ |
| | base64 -d \ |
| > $HOME/.gke-jenkins/release-credentials/release-keyring.gpg |
| |
| gcloud --project=mendel-linux-cloud-infra \ |
| secrets versions access latest --secret="${PASSPHRASE_NAME}" \ |
| > $HOME/.gke-jenkins/release-credentials/passphrase.txt |
| |
| gpg --no-default-keyring \ |
| --keyring=$HOME/.gke-jenkins/release-credentials/release-keyring.gpg \ |
| --with-colons \ |
| --list-secret-keys \ |
| | awk -F: '$1 == "grp" { print $10 }' \ |
| | head -n1 \ |
| > $HOME/.gke-jenkins/release-credentials/keygrip.txt |
