.woodpecker.yml

@@ -16,11 +16,11 @@ steps:
 
   deploy:
     image: quay.io/wollud1969/k8s-admin-helper:0.1.3
-    environment:
-      KUBE_CONFIG_CONTENT:
-        from_secret: kube_config
-      GPG_PASSPHRASE:
-        from_secret: gpg_passphrase
+    secrets:
+      - source: kube_config
+        target: KUBE_CONFIG_CONTENT
+      - source: gpg_passphrase
+        target: GPG_PASSPHRASE
     commands:
       - export IMAGE_TAG=$CI_COMMIT_TAG
       - printf "$KUBE_CONFIG_CONTENT" > /tmp/kubeconfig

deployment/deploy.sh

@@ -18,7 +18,7 @@ SECRETS_FILE=`mktemp`
 pwd
 id
 echo $HOME
-gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --homedir /tmp/.gnupg --output $SECRETS_FILE secrets.asc
+gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --output $SECRETS_FILE secrets.asc
 . $SECRETS_FILE
 rm $SECRETS_FILE
 
@@ -39,9 +39,9 @@ kubectl create secret generic jupyter \
   --dry-run=client \
   -o yaml \
   --save-config \
-  --from-literal=PGHOST="$PGHOST" \
-  --from-literal=PGUSER="$PGUSER" \
-  --from-literal=PGPASSWORD="$PGPASSWORD" \
+  --from-literal=PGHOST="$PGHOST" | \
+  --from-literal=PGUSER="$PGUSER" | \
+  --from-literal=PGPASSWORD="$PGPASSWORD" | \
   --from-literal=PGSSLMODE="$PGSSLMODE" | \
   kubectl apply -f - -n $NAMESPACE