From 6f928f99ebdf6031b7530dad8c15166ea882c4fd Mon Sep 17 00:00:00 2001
From: Pramod P <pramod.p@juspay.in>
Date: Tue, 10 Feb 2026 19:01:27 +0530
Subject: [PATCH 1/5] added sandbox branch for gcr push

---
 .github/workflows/build-gcr.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build-gcr.yml b/.github/workflows/build-gcr.yml
index fefb08f2767..c775a551f79 100644
--- a/.github/workflows/build-gcr.yml
+++ b/.github/workflows/build-gcr.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - release/prod
+      - release/sandbox
   workflow_dispatch:  # allows manual trigger for testing
 
 env:

From 2beafebe453fa4f6ecfae4352a140f8e226ebb39 Mon Sep 17 00:00:00 2001
From: Pramod P <pramod.p@juspay.in>
Date: Thu, 12 Feb 2026 15:40:48 +0530
Subject: [PATCH 2/5] jenkins setup for sbx

---
 .github/workflows/build-gcr.yml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-gcr.yml b/.github/workflows/build-gcr.yml
index c775a551f79..e88ecb3e9bd 100644
--- a/.github/workflows/build-gcr.yml
+++ b/.github/workflows/build-gcr.yml
@@ -8,7 +8,6 @@ on:
   workflow_dispatch:  # allows manual trigger for testing
 
 env:
-  GCR_PROJECT: xyne-prod
   IMAGE_NAME: litellm
 
 jobs:
@@ -24,17 +23,28 @@ jobs:
         id: commit
         run: echo "sha=$(git rev-parse --short=6 HEAD)" >> $GITHUB_OUTPUT
 
+      - name: Select environment
+        id: envselect
+        run: |
+          if [[ "${{ github.ref_name }}" == "release/prod" ]]; then
+            echo "project=xyne-prod" >> $GITHUB_OUTPUT
+            echo "cred=${{ secrets.SERVICE_ACCOUNT_KEY }}" >> $GITHUB_OUTPUT
+          else
+            echo "project=xyne-dev-461113" >> $GITHUB_OUTPUT
+            echo "cred=${{ secrets.SERVICE_ACCOUNT_KEY_SANDBOX }}" >> $GITHUB_OUTPUT
+          fi
+
       - name: Set image tag
         id: image
         run: |
-          IMAGE_TAG="gcr.io/${{ env.GCR_PROJECT }}/${{ env.IMAGE_NAME }}:${{ steps.commit.outputs.sha }}-juspay-build-v${{ github.run_number }}"
+          IMAGE_TAG="gcr.io/${{ steps.envselect.outputs.project }}/${{ env.IMAGE_NAME }}:${{ steps.commit.outputs.sha }}-juspay-build-v${{ github.run_number }}"
           echo "tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
           echo "Image tag: ${IMAGE_TAG}"
 
       - name: Authenticate to Google Cloud
         uses: google-github-actions/auth@v2
         with:
-          credentials_json: ${{ secrets.SERVICE_ACCOUNT_KEY }}
+          credentials_json: ${{ steps.envselect.outputs.cred }}
 
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v2

From c7c701a6b1186d53ee57b4d8f4abf221dd6ca151 Mon Sep 17 00:00:00 2001
From: Pramod P <pramod.p@juspay.in>
Date: Thu, 12 Feb 2026 16:01:29 +0530
Subject: [PATCH 3/5] build fix

---
 .github/workflows/build-gcr.yml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build-gcr.yml b/.github/workflows/build-gcr.yml
index e88ecb3e9bd..0765e454d82 100644
--- a/.github/workflows/build-gcr.yml
+++ b/.github/workflows/build-gcr.yml
@@ -28,10 +28,8 @@ jobs:
         run: |
           if [[ "${{ github.ref_name }}" == "release/prod" ]]; then
             echo "project=xyne-prod" >> $GITHUB_OUTPUT
-            echo "cred=${{ secrets.SERVICE_ACCOUNT_KEY }}" >> $GITHUB_OUTPUT
           else
             echo "project=xyne-dev-461113" >> $GITHUB_OUTPUT
-            echo "cred=${{ secrets.SERVICE_ACCOUNT_KEY_SANDBOX }}" >> $GITHUB_OUTPUT
           fi
 
       - name: Set image tag
@@ -41,10 +39,17 @@ jobs:
           echo "tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
           echo "Image tag: ${IMAGE_TAG}"
 
-      - name: Authenticate to Google Cloud
+      - name: Authenticate to Google Cloud (prod)
+        if: github.ref_name == 'release/prod'
         uses: google-github-actions/auth@v2
         with:
-          credentials_json: ${{ steps.envselect.outputs.cred }}
+          credentials_json: ${{ secrets.SERVICE_ACCOUNT_KEY }}
+
+      - name: Authenticate to Google Cloud (sandbox)
+        if: github.ref_name != 'release/prod'
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.SERVICE_ACCOUNT_KEY_SANDBOX }}
 
       - name: Set up Cloud SDK
         uses: google-github-actions/setup-gcloud@v2

From 69b1c9ac17b49825fd86a1bf278c0df470de7d66 Mon Sep 17 00:00:00 2001
From: Pramod P <pramod.p@juspay.in>
Date: Thu, 12 Feb 2026 19:20:58 +0530
Subject: [PATCH 4/5] addding sync/v[0-9] branches for gcr push

---
 .github/workflows/build-gcr.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build-gcr.yml b/.github/workflows/build-gcr.yml
index 0765e454d82..7298339f271 100644
--- a/.github/workflows/build-gcr.yml
+++ b/.github/workflows/build-gcr.yml
@@ -5,6 +5,7 @@ on:
     branches:
       - release/prod
       - release/sandbox
+      - sync/v[0-9.]*
   workflow_dispatch:  # allows manual trigger for testing
 
 env:

From 133d972e6029d196b739343043e8aab9c701bece Mon Sep 17 00:00:00 2001
From: Pramod P <pramod.p@juspay.in>
Date: Thu, 12 Feb 2026 19:24:38 +0530
Subject: [PATCH 5/5] build fix

---
 .github/workflows/build-gcr.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-gcr.yml b/.github/workflows/build-gcr.yml
index 7298339f271..e8da98f540f 100644
--- a/.github/workflows/build-gcr.yml
+++ b/.github/workflows/build-gcr.yml
@@ -5,7 +5,7 @@ on:
     branches:
       - release/prod
       - release/sandbox
-      - sync/v[0-9.]*
+      - sync/v*
   workflow_dispatch:  # allows manual trigger for testing
 
 env: