Skip to content

Commit

Permalink
cloud builder escape
Browse files Browse the repository at this point in the history
  • Loading branch information
tlbdk committed Nov 14, 2019
1 parent 7debf5d commit e5b3c11
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions cloudbuild.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ steps:
args: ['-c', 'docker build --tag="gcr.io/$PROJECT_ID/$REPO_NAME.$BRANCH_NAME:$COMMIT_SHA" --tag="gcr.io/$PROJECT_ID/$REPO_NAME.$BRANCH_NAME:latest" --file=Dockerfile .']
# Test cloud build wrapper using ssh key embedded in the container
- name: 'gcr.io/$PROJECT_ID/$REPO_NAME.$BRANCH_NAME:$COMMIT_SHA'
args: ['build', '--progress=plain', '--ssh=default=$SSH_AUTH_SOCK', '.']
args: ['build', '--progress=plain', '--ssh=default=$$SSH_AUTH_SOCK', '.']
dir: 'testdata'
secretEnv:
- 'SSH_KEY_PASSWORD'
Expand All @@ -32,7 +32,7 @@ steps:
- "DOCKER_BUILDKIT=1"
# Test cloud build wrapper using KSM key
- name: 'gcr.io/$PROJECT_ID/$REPO_NAME.$BRANCH_NAME:$COMMIT_SHA'
args: ['build', '--progress=plain', '--ssh=default=$SSH_AUTH_SOCK', '.']
args: ['build', '--progress=plain', '--ssh=default=$$SSH_AUTH_SOCK', '.']
dir: 'testdata'
env:
- "SSH_KEY_PATH=kms://projects/connectedcars-staging/locations/global/keyRings/cloudbuilder/cryptoKeys/ssh-key/cryptoKeyVersions/3"
Expand Down

0 comments on commit e5b3c11

Please sign in to comment.