From 7ff95c77ba9bd841144a10f2631e23c74237d306 Mon Sep 17 00:00:00 2001 From: Pavlov Alexandr Date: Mon, 15 Jun 2026 21:47:17 +0700 Subject: [PATCH] fix(ci): pass per-app SENTRY_DSN secrets to the staging secret renderer The "Render and apply staging secrets" step never passed any SENTRY_DSN env to render-staging-secrets.py, so SENTRY_DSN was always rendered empty in the runtime Secrets (the Phase 18 wiring was incomplete). Pass the three per-app secrets SENTRY_DSN_SERVER_2 / _REPLAYS_FETCHER / _REPLAY_PARSER_2 so each app's runtime Secret carries its DSN. Completes the per-app wiring from the prior renderer change. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/deploy-staging.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml index 75d2c3a..06065bb 100644 --- a/.github/workflows/deploy-staging.yml +++ b/.github/workflows/deploy-staging.yml @@ -118,6 +118,9 @@ jobs: S3_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY_ID }} S3_BUCKET: ${{ secrets.S3_BUCKET }} S3_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_ACCESS_KEY }} + SENTRY_DSN_SERVER_2: ${{ secrets.SENTRY_DSN_SERVER_2 }} + SENTRY_DSN_REPLAYS_FETCHER: ${{ secrets.SENTRY_DSN_REPLAYS_FETCHER }} + SENTRY_DSN_REPLAY_PARSER_2: ${{ secrets.SENTRY_DSN_REPLAY_PARSER_2 }} run: | set -euo pipefail tmp_secrets=$(mktemp)