Incrementally testing GH action.

Author: jcpitre

.github/workflows/duplicate-prod-db.yml

@@ -13,7 +13,23 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Authenticate to Google Cloud
+      - name: Authenticate to Google Cloud PROD project
+        id: gcloud_auth
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.PROD_GCP_MOBILITY_FEEDS_SA_KEY }}
+
+      - name: GCloud Setup
+        uses: google-github-actions/setup-gcloud@v2
+
+      - name: Get PROD SQL service account
+        run: |
+          SOURCE_PROJECT_ID=${{ vars.PROD_MOBILITY_FEEDS_PROJECT_ID }}
+          SERVICE_ACCOUNT=$(gcloud sql instances describe "mobilitydata-database-instance" --project=$SOURCE_PROJECT_ID --format="value(serviceAccountEmailAddress)")
+          echo "SOURCE_SQL_SERVICE_ACCOUNT=$SERVICE_ACCOUNT" >> $GITHUB_ENV
+          echo "Destination SQL Service Account: $SERVICE_ACCOUNT"
+
+      - name: Authenticate to Google Cloud QA project
         id: gcloud_auth
         uses: google-github-actions/auth@v2
         with:
@@ -24,7 +40,6 @@ jobs:
 
       - name: Create DB dump bucket
         run: |
-          SOURCE_PROJECT_ID=${{ vars.PROD_MOBILITY_FEEDS_PROJECT_ID }}
           DEST_PROJECT_ID=${{ vars.QA_MOBILITY_FEEDS_PROJECT_ID }}
           DUMP_BUCKET_NAME="mobilitydata-database-dump-qa"
           BUCKET_PROJECT_ID=${{ vars.QA_MOBILITY_FEEDS_PROJECT_ID }}
@@ -38,15 +53,11 @@ jobs:
           else
             echo "Bucket already exists."
           fi
-
-          # Get the service account got the PROD DB and give write permsssion to the bucket
-          SOURCE_SQL_SERVICE_ACCOUNT=$(gcloud sql instances describe "mobilitydata-database-instance" --project=$SOURCE_PROJECT_ID --format="value(serviceAccountEmailAddress)")
-          echo "Source SQL Service Account: $SOURCE_SQL_SERVICE_ACCOUNT"
           
           # Give write permission for the source sql instance to write to the bucket
           gsutil iam ch serviceAccount:$SOURCE_SQL_SERVICE_ACCOUNT:objectCreator gs://$DUMP_BUCKET_NAME
 
-          # Get the service account got the QA DB and give read permsssion to the bucket
+          # Get the service account for the QA DB and give read permsssion to the bucket
           DEST_SQL_SERVICE_ACCOUNT=$(gcloud sql instances describe $SQL_INSTANCE_NAME --project=DEST_PROJECT_ID --format="value(serviceAccountEmailAddress)")
           echo "Destination SQL Service Account: $DEST_SQL_SERVICE_ACCOUNT"