Skip to content

fix(ci): read GCP_PROJECT_ID from vars in rollback.yml - #637

Merged
cristim merged 2 commits into
mainfrom
fix/rollback-gcp-project-vars-300
Oct 6, 2026
Merged

cristim merged 2 commits into
mainfrom
fix/rollback-gcp-project-vars-300

Conversation

@cristim

@cristim cristim commented Oct 6, 2026 •

Copy link
Copy Markdown
Member

Closes #300

Both rollback.yml references (validate job and the Terraform rollback job) now read vars.GCP_PROJECT_ID, matching deploy-gcp.yml and cleanup-staging.yml. The error message and header comment now say variable.

Checks: actionlint clean. Workflows cannot be run locally; CI is the check.

Docs: .github/workflows/README.md now lists GCP_PROJECT_ID under Required Variables and uses gh variable set. Other repo mentions (cmd/rekey/README.md:79, known_issues/resolved/25_*.md) refer to process environment variables and are correct.

deploy-gcp.yml and cleanup-staging.yml read it from repository variables.
rollback.yml read secrets.GCP_PROJECT_ID, so on a repo configured per the
other workflows the validate job refused to run and a GCP rollback was
blocked during an incident.
@cristim cristim added priority/p2 Backlog-worthy severity/medium Moderate harm urgency/this-sprint Within the current sprint impact/internal Team-internal only triaged Item has been triaged effort/xs Trivial / one-liner type/bug Defect labels Oct 6, 2026
@coderabbitai

coderabbitai Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

  • Run on-demand review

This review includes 2 billable files and costs up to $0.50.

  • Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 59 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 68 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Repository: LeanerCloud/cloud-commitments-platform/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Essentials
  • Run ID: 17c640ea-119f-4bbb-a68f-0a0dacd1d804
📥 Commits

Reviewing files that changed from the base of the PR and between 3413591 and c8b96bf.

📒 Files selected for processing (2)
  • .github/workflows/README.md
  • .github/workflows/rollback.yml
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

The workflows README listed it under secrets and told operators to run
gh secret set, but every GCP workflow reads vars.GCP_PROJECT_ID.
@cristim
cristim merged commit e6d45c7 into main Oct 6, 2026
25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

effort/xs Trivial / one-liner impact/internal Team-internal only priority/p2 Backlog-worthy severity/medium Moderate harm triaged Item has been triaged type/bug Defect urgency/this-sprint Within the current sprint

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix(ci): rollback.yml reads secrets.GCP_PROJECT_ID; every other workflow uses vars

1 participant