.woodpecker.yml

@@ -21,6 +21,7 @@ steps:
         from_secret: kube_config
       GPG_PASSPHRASE:
         from_secret: gpg_passphrase
+      HOME: /home/user
     commands:
       - export IMAGE_TAG=$CI_COMMIT_TAG
       - printf "$KUBE_CONFIG_CONTENT" > /tmp/kubeconfig

deployment/deploy.sh

@@ -18,7 +18,7 @@ SECRETS_FILE=`mktemp`
 pwd
 id
 echo $HOME
-gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --homedir /tmp/.gnupg --output $SECRETS_FILE secrets.asc
+gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --output $SECRETS_FILE secrets.asc
 . $SECRETS_FILE
 rm $SECRETS_FILE
 
@@ -39,9 +39,9 @@ kubectl create secret generic jupyter \
   --dry-run=client \
   -o yaml \
   --save-config \
-  --from-literal=PGHOST="$PGHOST" \
-  --from-literal=PGUSER="$PGUSER" \
-  --from-literal=PGPASSWORD="$PGPASSWORD" \
+  --from-literal=PGHOST="$PGHOST" | \
+  --from-literal=PGUSER="$PGUSER" | \
+  --from-literal=PGPASSWORD="$PGPASSWORD" | \
   --from-literal=PGSSLMODE="$PGSSLMODE" | \
   kubectl apply -f - -n $NAMESPACE