From a76a404357361b478c7ef54dc3505dab06a2f842 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Antoine=20Beaupr=C3=A9?= <anarcat@debian.org> Date: Wed, 3 Nov 2021 21:30:53 -0400 Subject: [PATCH] clarify what the SITE_URL is for (tpo/tpa/ci-templates#1) ... and it's not for nothing! :) --- service/static-shim.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/service/static-shim.md b/service/static-shim.md index c2fe68ff..0185b585 100644 --- a/service/static-shim.md +++ b/service/static-shim.md @@ -427,6 +427,12 @@ to only a *specific* site update, with a wrapper that will call `rsync` but limited to a specific directory. We also allow connections only from GitLab over SSH. +This implies that the `SITE_URL` provided by the GitLab CI job over +SSH, whether it is for the `rsync` or `static-update-component` +commands, is actually ignored by the backend. It is used in the job +definition solely to avoid doing two deploys in parallel to the same +site, through the GitLab [`resource_group`](https://docs.gitlab.com/ee/ci/resource_groups/) mechanism. + The public part of that key should be set in the GitLab project, as a File variable called `STATIC_GITLAB_SHIM_SSH_PRIVATE_KEY`. This way the GitLab runners get access to the private key and can deploy those -- GitLab