ia_dev/deploy/branch-align.sh
2026-03-17 01:30:56 +01:00

131 lines
4.5 KiB
Bash
Executable File

#!/usr/bin/env bash
# Aligns only origin/test, origin/pprod, origin/prod to current branch SHA. main is not aligned.
# Usage: ./deploy/branch-align.sh [project_id] <env>
set -euo pipefail
SCRIPT_REAL="$(readlink -f "${BASH_SOURCE[0]:-$0}" 2>/dev/null || realpath "${BASH_SOURCE[0]:-$0}" 2>/dev/null || echo "${BASH_SOURCE[0]:-$0}")"
DEPLOY_DIR="$(cd "$(dirname "$SCRIPT_REAL")" && pwd)"
IA_DEV_ROOT="$(cd "$DEPLOY_DIR/.." && pwd)"
# Optional first arg: project id (must exist as projects/<id>/conf.json); then re-exec from project root
if [[ -n "${1:-}" && -f "${IA_DEV_ROOT}/projects/${1}/conf.json" && ! "$1" =~ ^(main|test|pprod|prod)$ ]]; then
export IA_PROJECT_ID="$1"
shift
# shellcheck source=../lib/project_config.sh
source "${IA_DEV_ROOT}/lib/project_config.sh"
[[ -n "${PROJECT_ID:-}" ]] && export IA_PROJECT_ID="$PROJECT_ID"
PROJECT_ROOT=""
if [[ -n "${PROJECT_CONFIG_PATH:-}" && -f "${PROJECT_CONFIG_PATH:-}" ]] && command -v jq >/dev/null 2>&1; then
_secrets_path="$(jq -r '.deploy.secrets_path // ""' "$PROJECT_CONFIG_PATH" 2>/dev/null)"
[[ -n "$_secrets_path" ]] && PROJECT_ROOT="$(dirname "$_secrets_path")"
fi
if [[ -z "$PROJECT_ROOT" || ! -d "$PROJECT_ROOT" ]]; then
echo "[branch-align][ERROR] Could not resolve project root for project_id ${IA_PROJECT_ID}" >&2
exit 1
fi
cd "$PROJECT_ROOT" && exec "${DEPLOY_DIR}/$(basename "${BASH_SOURCE[0]:-$0}")" "$@"
fi
if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
echo "[branch-align][ERROR] Not in a git repository" >&2
exit 1
fi
PROJECT_ROOT="$(git rev-parse --show-toplevel)"
if [[ "$(pwd)" != "$PROJECT_ROOT" ]]; then
cd "$PROJECT_ROOT" && exec "${DEPLOY_DIR}/$(basename "${BASH_SOURCE[0]:-$0}")" "$@"
fi
env_branch="${1:-}"
if [[ -z "$env_branch" ]]; then
echo "[branch-align][ERROR] Missing <env> argument (expected: main|test|pprod|prod)" >&2
echo "Usage: ./deploy/branch-align.sh [project_id] <env>" >&2
exit 1
fi
if [[ ! "$env_branch" =~ ^(main|test|pprod|prod)$ ]]; then
echo "[branch-align][ERROR] Invalid <env>: must be main, test, pprod or prod (got: '${env_branch}')" >&2
echo "Usage: ./deploy/branch-align.sh [project_id] <env>" >&2
exit 1
fi
current_branch="$(git rev-parse --abbrev-ref HEAD)"
if [[ "$current_branch" != "$env_branch" ]]; then
echo "[branch-align][ERROR] Must be on branch '${env_branch}' (current: '${current_branch}')" >&2
exit 1
fi
# Fetch latest refs
git fetch origin
target_sha="$(git rev-parse "$env_branch")"
origin_env_sha="$(git rev-parse "origin/${env_branch}")"
if [[ "$target_sha" != "$origin_env_sha" ]]; then
echo "[branch-align] origin/${env_branch} differs from local ${env_branch}. Updating remote to local (env priority)."
git push --force-with-lease origin "${target_sha}:${env_branch}"
git fetch origin
fi
# Align all three branches to env SHA
for br in test pprod prod; do
if [[ "$br" == "$env_branch" ]]; then
# Ensure tracking exists
git branch --set-upstream-to="origin/${br}" "$br" >/dev/null 2>&1 || true
continue
fi
git branch -f "$br" "$target_sha"
git push --force-with-lease origin "${target_sha}:${br}"
git branch --set-upstream-to="origin/${br}" "$br" >/dev/null 2>&1 || true
done
# Also ensure env branch tracks its remote
git branch --set-upstream-to="origin/${env_branch}" "$env_branch" >/dev/null 2>&1 || true
# Verify last 30 commits are identical
tmp1="$(mktemp -t branch-align-test.XXXXXX)"
tmp2="$(mktemp -t branch-align-pprod.XXXXXX)"
tmp3="$(mktemp -t branch-align-prod.XXXXXX)"
cleanup() {
rm -f "$tmp1" "$tmp2" "$tmp3"
}
trap cleanup EXIT
git log -30 --format=%H origin/test > "$tmp1"
git log -30 --format=%H origin/pprod > "$tmp2"
git log -30 --format=%H origin/prod > "$tmp3"
if ! diff -u "$tmp1" "$tmp2" >/dev/null; then
echo "[branch-align][ERROR] Last 30 commits differ: origin/test vs origin/pprod" >&2
exit 1
fi
if ! diff -u "$tmp1" "$tmp3" >/dev/null; then
echo "[branch-align][ERROR] Last 30 commits differ: origin/test vs origin/prod" >&2
exit 1
fi
# Final assertions
if [[ "$(git rev-parse --abbrev-ref HEAD)" != "$env_branch" ]]; then
echo "[branch-align][ERROR] Branch changed unexpectedly" >&2
exit 1
fi
sha_test="$(git rev-parse origin/test)"
sha_pprod="$(git rev-parse origin/pprod)"
sha_prod="$(git rev-parse origin/prod)"
if [[ "$sha_test" != "$sha_pprod" ]] || [[ "$sha_test" != "$sha_prod" ]]; then
echo "[branch-align][ERROR] Remote branches are not aligned" >&2
echo "origin/test=$sha_test" >&2
echo "origin/pprod=$sha_pprod" >&2
echo "origin/prod=$sha_prod" >&2
exit 1
fi
echo "[branch-align] OK: origin/test, origin/pprod, origin/prod aligned to ${sha_test}"