|
1 | 1 | local utils = import '../libs/utils.libsonnet'; |
2 | 2 | local gocdtasks = import 'github.com/getsentry/gocd-jsonnet/libs/gocd-tasks.libsonnet'; |
3 | 3 |
|
| 4 | +// List of single tenant regions that use sentry-st organization |
| 5 | +local single_tenants = ['disney', 'geico', 'goldmansachs', 'ly', 's4s']; |
| 6 | + |
4 | 7 | // The purpose of this stage is to let the deployment soak for a while and |
5 | 8 | // detect any issues that might have been introduced. |
6 | 9 | local soak_time(region) = |
@@ -114,12 +117,12 @@ local deploy_primary(region) = [ |
114 | 117 | jobs: { |
115 | 118 | create_sentry_release: { |
116 | 119 | environment_variables: { |
117 | | - SENTRY_ORG: if region == 's4s' then 'sentry-st' else 'sentry', |
118 | | - SENTRY_PROJECT: if region == 's4s' then 'sentry-for-sentry' else 'relay', |
119 | | - SENTRY_URL: if region == 's4s' then 'https://sentry-st.sentry.io/' else 'https://sentry.my.sentry.io/', |
| 120 | + SENTRY_ORG: if std.member(single_tenants, region) then 'sentry-st' else 'sentry', |
| 121 | + SENTRY_PROJECT: if std.member(single_tenants, region) then (if region == 's4s' then 'sentry-for-sentry' else region) else 'relay', |
| 122 | + SENTRY_URL: if std.member(single_tenants, region) then 'https://sentry-st.sentry.io/' else 'https://sentry.my.sentry.io/', |
120 | 123 | // Temporary; self-service encrypted secrets aren't implemented yet. |
121 | 124 | // This should really be rotated to an internal integration token. |
122 | | - SENTRY_AUTH_TOKEN: if region == 's4s' then '{{SECRET:[devinfra-temp][relay_sentry_st_auth_token]}}' else '{{SECRET:[devinfra-temp][relay_sentry_auth_token]}}', |
| 125 | + SENTRY_AUTH_TOKEN: if std.member(single_tenants, region) then '{{SECRET:[devinfra-temp][relay_sentry_st_auth_token]}}' else '{{SECRET:[devinfra-temp][relay_sentry_auth_token]}}', |
123 | 126 | }, |
124 | 127 | timeout: 1200, |
125 | 128 | elastic_profile_id: 'relay', |
|
0 commit comments