docs: add secrets logic to ci (#273)

GoogleCloudPlatform · Jun 28, 2021 · 3c21ee5 · 3c21ee5
1 parent 63b47a4
commit 3c21ee5
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/ci/cloudbuild_pypi.yaml b/ci/cloudbuild_pypi.yaml
@@ -23,8 +23,8 @@ steps:
   - 'TWINE_PASSWORD=${_TWINE_PASSWORD}'
   - 'TWINE_REPOSITORY_URL=${_TWINE_REPOSITORY_URL}'
 substitutions:
-  _TWINE_USERNAME: username
-  _TWINE_PASSWORD: password
+  _TWINE_USERNAME: __token__
+  _TWINE_PASSWORD:
   _TWINE_REPOSITORY_URL: https://upload.pypi.org/legacy/
 options:
   substitution_option: 'ALLOW_LOOSE'
diff --git a/ci/release_pypi.sh b/ci/release_pypi.sh
@@ -13,6 +13,12 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+
+if [ "${TWINE_PASSWORD}" == "" ]
+then
+    TWINE_PASSWORD=$(gcloud secrets versions access latest --secret="data-validation" --project=${PROJECT_ID})
+fi
+
 python3 -m pip install --upgrade build setuptools twine wheel
 python3 -m build
 python3 -m twine upload dist/*