---
kind: secret
name: docker_username
get:
  path: odit-registry-builder
  name: username

---
kind: secret
name: docker_password
get:
  path: odit-registry-builder
  name: password

---
kind: secret
name: cosign_key
get:
  path: cosign
  name: cosign.key

---
kind: secret
name: cosign_password
get:
  path: cosign
  name: cosign.password

---
kind: pipeline
type: kubernetes
name: sign_image
steps:
    image: registry.odit.services/hub/library/alpine:edge
    depends_on: [build_tag]
    commands:
      - echo $COSIGN_KEY | sed 's/<br>/\n/g' > cosign.key
      - echo $DOCKER_PASSWORD | docker login registry.odit.services -u $DOCKER_USERNAME --password-stdin
      - "cosign sign --key cosign.key registry.odit.services/PROJECT/REPO:${DRONE_TAG}"
    environment:
      COSIGN_KEY:
        from_secret: cosign_key
      COSIGN_PASSWORD:
        from_secret: cosign_password
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
trigger:
  event:
    - tag