Use commit sha for version and add some docs about

matt-boris · matt-boris · commit fd47dc069d7a · 2022-07-26T10:23:52.000-04:00
secrets used in the cloudbuild config file
diff --git a/cloudbuild.yaml b/cloudbuild.yaml
@@ -40,7 +40,7 @@ options:
   dynamicSubstitutions: true
 substitutions:
   _NODE_VERSION: 16.16.0
-  _VERSION: '{"version":"${BRANCH_NAME}_dev","commit":"${SHORT_SHA}","source":"https://github.com/taskcluster/taskcluster","build":"${BUILD_ID}"}'
+  _VERSION: '{"version":"${BRANCH_NAME}_${SHORT_SHA}","commit":"${SHORT_SHA}","source":"https://github.com/taskcluster/taskcluster","build":"${BUILD_ID}"}'
   _IMAGE_NAME: gcr.io/${PROJECT_ID}/${PROJECT_ID}/${BRANCH_NAME}
   _IMAGE_VERSION: latest
 availableSecrets:
diff --git a/dev-docs/dev-deployment.md b/dev-docs/dev-deployment.md
@@ -353,3 +353,9 @@ Warning: by using this approach, you are responsible for maintenance and backups
    Once users are set, you can run `yarn dev:db:upgrade` (with running port-forward) to create db schema and stored functions
 
 Now it should be possible to use postgres for dev purposes inside the cluster. Make sure to make backups.
+
+## GCP Cloud Build
+
+Commits that land on `main` trigger a build on GCP Cloud Build. This build is configured by the [`cloudbuild.yaml` file](../cloudbuild.yaml). Here's a link to Google's docs on the build config file schema for cloud build: https://cloud.google.com/build/docs/build-config-file-schema.
+
+A couple secrets are used in the config and they are both stored in GCP Secret Manager. Follow [these docs](https://cloud.google.com/build/docs/securing-builds/use-secrets) to create more secrets or edit the current secrets. A new version needs to be created each time you change the secrets. The current cloudbuild config points to the latest version of the secrets, so any edits to these secrets will be automatically picked up.
