ricardo/NALU
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: remove stack before secret rotation (scale=0 doesn't free secret refs)
Some checks failed
NALU Deployment Pipeline / Run Tests (push) Successful in 1m14s
Details
NALU Deployment Pipeline / PR Validation (push) Has been skipped
Details
NALU Deployment Pipeline / Build and Push Image (push) Successful in 1m59s
Details
NALU Deployment Pipeline / Deploy naluai.dev (push) Failing after 1m8s
Details
NALU Deployment Pipeline / Cleanup Old Resources (push) Has been skipped
Details

Browse Source 
docker stack rm nalu releases all secret references.
Wait for services to terminate before recreating secrets.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Ricardo Carneiro 2026-05-15 21:43:12 -03:00
parent a2c2b09d0e
commit 971c390ea3
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.gitea/workflows/deploy-nalu.yml
View File

@ -211,9 +211,11 @@ jobs:
ssh -o StrictHostKeyChecking=no ubuntu@${{ env.SWARM_MANAGER }} << SSHEOF ssh -o StrictHostKeyChecking=no ubuntu@${{ env.SWARM_MANAGER }} << SSHEOF
set -e set -e
# ── Scale down so secrets can be rotated ───────────────────────── # ── Remove stack so secrets can be rotated ───────────────────────
docker service scale nalu_app=0 2>/dev/null || true docker stack rm nalu 2>/dev/null || true
sleep 5 # wait until all nalu services are gone
timeout 60 bash -c 'until ! docker service ls 2>/dev/null | grep -q nalu_; do sleep 2; done' || true
sleep 3
# ── Create/update Docker secrets ───────────────────────────────── # ── Create/update Docker secrets ─────────────────────────────────
update_secret() { update_secret() {