diff --git a/drone/build_image.yaml b/drone/build_image.yaml new file mode 100644 index 0000000..679b533 --- /dev/null +++ b/drone/build_image.yaml @@ -0,0 +1,39 @@ +--- +kind: secret +name: docker_username +get: + path: odit-registry-builder + name: username + +--- +kind: secret +name: docker_password +get: + path: odit-registry-builder + name: password + +--- +kind: pipeline +type: kubernetes +name: build:latest + +steps: + - name: docker release + image: plugins/docker + depends_on: [clone] + settings: + username: + from_secret: docker_username + password: + from_secret: docker_password + build_args: [] + repo: registry.odit.services/PROJECT/REPO + tags: + - latest + registry: registry.odit.services + mtu: 1000 +trigger: + branch: + - main + event: + - push \ No newline at end of file diff --git a/drone/sign_image.yaml b/drone/sign_image.yaml new file mode 100644 index 0000000..1ae018c --- /dev/null +++ b/drone/sign_image.yaml @@ -0,0 +1,51 @@ +--- +kind: secret +name: docker_username +get: + path: odit-registry-builder + name: username + +--- +kind: secret +name: docker_password +get: + path: odit-registry-builder + name: password + +--- +kind: secret +name: cosign_key +get: + path: cosign + name: cosign.key + +--- +kind: secret +name: cosign_password +get: + path: cosign + name: cosign.password + +--- +kind: pipeline +type: kubernetes +name: sign_image +steps: + image: registry.odit.services/hub/library/alpine:edge + depends_on: [build_tag] + commands: + - echo $COSIGN_KEY | sed 's/
/\n/g' > cosign.key + - echo $DOCKER_PASSWORD | docker login registry.odit.services -u $DOCKER_USERNAME --password-stdin + - "cosign sign --key cosign.key registry.odit.services/PROJECT/REPO:${DRONE_TAG}" + environment: + COSIGN_KEY: + from_secret: cosign_key + COSIGN_PASSWORD: + from_secret: cosign_password + DOCKER_PASSWORD: + from_secret: docker_password + DOCKER_USERNAME: + from_secret: docker_username +trigger: + event: + - tag \ No newline at end of file diff --git a/drone/test_playwright.yaml b/drone/test_playwright.yaml new file mode 100644 index 0000000..fc0ee49 --- /dev/null +++ b/drone/test_playwright.yaml @@ -0,0 +1,36 @@ +--- +kind: secret +name: npmjs_domain +get: + path: odit-npm-bot + name: domain + +--- +kind: secret +name: npmjs_token +get: + path: odit-npm-bot + name: token + +--- +kind: pipeline +type: kubernetes +name: test:pr +steps: + - name: playwright tests + image: registry.odit.services/hub/zenika/alpine-chrome:with-playwright + depends_on: [clone] + commands: + # - npm config set registry https://$NPM_REGISTRY_DOMAIN && npm config set //$NPM_REGISTRY_DOMAIN/:_authToken $NPM_REGISTRY_TOKEN + - npx pnpm i + - mkdir -p /home/chrome/.cache/ms-playwright/chromium-1000/chrome-linux + - ln -s /usr/bin/chromium-browser /home/chrome/.cache/ms-playwright/chromium-1000/chrome-linux/chrome + - yarn test + environment: + NPM_REGISTRY_DOMAIN: + from_secret: npmjs_domain + NPM_REGISTRY_TOKEN: + from_secret: npmjs_token +trigger: + event: + - pull_request \ No newline at end of file