.woodpecker.yml

@@ -15,16 +15,18 @@ steps:
       - event: [push, tag]
 
   deploy:
-    image: quay.io/wollud1969/k8s-admin-helper:0.1.3
-    environment:
-      KUBE_CONFIG_CONTENT:
-        from_secret: kube_config
-      GPG_PASSPHRASE:
-        from_secret: gpg_passphrase
+    image: quay.io/wollud1969/k8s-admin-helper:0.1.2
+    secrets:
+      - source: kube_config
+        target: KUBE_CONFIG_CONTENT
+      - source: gpg_passphrase
+        target: GPG_PASSPHRASE
     commands:
       - export IMAGE_TAG=$CI_COMMIT_TAG
       - printf "$KUBE_CONFIG_CONTENT" > /tmp/kubeconfig
       - export KUBECONFIG=/tmp/kubeconfig
+      - id
+      - pwd
       - ./deployment/deploy.sh
     when:
       - event: tag

deployment/deploy.sh

@@ -15,10 +15,7 @@ DEPLOYMENT_DIR=$PWD/deployment
 
 pushd $DEPLOYMENT_DIR > /dev/null
 SECRETS_FILE=`mktemp`
-pwd
-id
-echo $HOME
-gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --homedir /tmp/.gnupg --output $SECRETS_FILE secrets.asc
+gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --output $SECRETS_FILE secrets.asc
 . $SECRETS_FILE
 rm $SECRETS_FILE
 
@@ -39,9 +36,9 @@ kubectl create secret generic jupyter \
   --dry-run=client \
   -o yaml \
   --save-config \
-  --from-literal=PGHOST="$PGHOST" \
-  --from-literal=PGUSER="$PGUSER" \
-  --from-literal=PGPASSWORD="$PGPASSWORD" \
+  --from-literal=PGHOST="$PGHOST" | \
+  --from-literal=PGUSER="$PGUSER" | \
+  --from-literal=PGPASSWORD="$PGPASSWORD" | \
   --from-literal=PGSSLMODE="$PGSSLMODE" | \
   kubectl apply -f - -n $NAMESPACE