deploy-to-gcs: Use gcloud storage rsync

rsync features: * exclude list (used for timestamp) * --delete-unmatched-destination-objects may be useful in future to delete unused metadata files Note that gcloud rsync CLI is not the same as unix rsync: the SOURCE and DEST arguments in particular function completely differently. Also put some variables into actual named variables. Signed-off-by: Jussi Kukkonen <[email protected]>
sigstore · Feb 14, 2024 · 870e286 · 870e286
1 parent 963cc0b
commit 870e286
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/.github/workflows/deploy-to-gcs.yml b/.github/workflows/deploy-to-gcs.yml
@@ -41,10 +41,13 @@ jobs:
 
       - name: Upload repository to GCS
         run: |
+          BUCKET="gs://tuf-root-staging/"
+          LOAD_BALANCER="tuf-repo-cdn-lb"
+
           # Upload metadata, make sure we upload timestamp last
-          mv repository/timestamp.json .
-          gcloud storage cp --cache-control=no-store -r repository/* gs://tuf-root-staging/
-          gcloud storage cp --cache-control=no-store timestamp.json gs://tuf-root-staging/
+          gcloud storage rsync --cache-control=no-store --recursive --exclude=timestamp.json \
+              repository/ $BUCKET
+          gcloud storage cp --cache-control=no-store repository/timestamp.json $BUCKET
 
           # invalidate CDN cache
-          gcloud compute url-maps invalidate-cdn-cache tuf-repo-cdn-lb --path "/*" --async
+          gcloud compute url-maps invalidate-cdn-cache $LOAD_BALANCER --path "/*" --async