51 lines
1.0 KiB
YAML
51 lines
1.0 KiB
YAML
---
|
|
kind: secret
|
|
name: docker_username
|
|
get:
|
|
path: odit-registry-builder
|
|
name: username
|
|
|
|
---
|
|
kind: secret
|
|
name: docker_password
|
|
get:
|
|
path: odit-registry-builder
|
|
name: password
|
|
|
|
---
|
|
kind: secret
|
|
name: cosign_key
|
|
get:
|
|
path: cosign
|
|
name: cosign.key
|
|
|
|
---
|
|
kind: secret
|
|
name: cosign_password
|
|
get:
|
|
path: cosign
|
|
name: cosign.password
|
|
|
|
---
|
|
kind: pipeline
|
|
type: kubernetes
|
|
name: sign_image
|
|
steps:
|
|
image: registry.odit.services/hub/library/alpine:edge
|
|
depends_on: [build_tag]
|
|
commands:
|
|
- echo $COSIGN_KEY | sed 's/<br>/\n/g' > cosign.key
|
|
- echo $DOCKER_PASSWORD | docker login registry.odit.services -u $DOCKER_USERNAME --password-stdin
|
|
- "cosign sign --key cosign.key registry.odit.services/PROJECT/REPO:${DRONE_TAG}"
|
|
environment:
|
|
COSIGN_KEY:
|
|
from_secret: cosign_key
|
|
COSIGN_PASSWORD:
|
|
from_secret: cosign_password
|
|
DOCKER_PASSWORD:
|
|
from_secret: docker_password
|
|
DOCKER_USERNAME:
|
|
from_secret: docker_username
|
|
trigger:
|
|
event:
|
|
- tag |