From 3dacd6c0b121a93367c3e0b3a6166ad87e2d5e7b Mon Sep 17 00:00:00 2001
From: gbrodman <gbrodman@google.com>
Date: Mon, 17 Aug 2026 18:56:47 +0000
Subject: [PATCH] Fix substitution names in cloudbuild-monitor-zfa (#3212)

We shouldn't have stripped the leading underscore in 84811d56. GCB
requires user-defined substitutions to begin with an underscore.
---
 release/cloudbuild-monitor-zfa.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/release/cloudbuild-monitor-zfa.yaml b/release/cloudbuild-monitor-zfa.yaml
index 9d5dfd4f0..9df703b6d 100644
--- a/release/cloudbuild-monitor-zfa.yaml
+++ b/release/cloudbuild-monitor-zfa.yaml
@@ -14,12 +14,12 @@ steps:
 - name: 'ubuntu'
   entrypoint: '/bin/bash'
   env:
-    - 'ZFA_SERVER_IP=${_ZFA_SERVER_IP}'
-    - 'TLD=${_TLD}'
+    - '_ZFA_SERVER_IP=${_ZFA_SERVER_IP}'
+    - '_TLD=${_TLD}'
   args:
     - -c
     - |
       set -e
       apt-get update
       apt-get install dnsutils -y
-      dig @"$ZFA_SERVER_IP" "$TLD" axfr | grep "Transfer failed"
+      dig @"$_ZFA_SERVER_IP" "$_TLD" axfr | grep "Transfer failed"