40 lines
1.0 KiB
YAML
40 lines
1.0 KiB
YAML
steps:
|
|
build:
|
|
image: plugins/kaniko
|
|
settings:
|
|
repo: ${FORGE_NAME}/${CI_REPO}
|
|
registry:
|
|
from_secret: container_registry
|
|
tags: latest,${CI_COMMIT_SHA},${CI_COMMIT_TAG}
|
|
username:
|
|
from_secret: container_registry_username
|
|
password:
|
|
from_secret: container_registry_password
|
|
dockerfile: Dockerfile
|
|
when:
|
|
- event: [push, tag]
|
|
|
|
scan_image:
|
|
image: aquasec/trivy
|
|
commands:
|
|
- TRIVY_DISABLE_VEX_NOTICE=1 trivy image $FORGE_NAME/$CI_REPO:$CI_COMMIT_SHA --quiet --exit-code 1
|
|
when:
|
|
- event: [push, tag]
|
|
|
|
deploy:
|
|
image: portainer/kubectl-shell:latest
|
|
secrets:
|
|
- source: kube_config
|
|
target: KUBE_CONFIG_CONTENT
|
|
- source: encryption_key
|
|
target: ENCRYPTION_KEY
|
|
- source: secrets_checksum
|
|
target: MD5_CHECKSUM
|
|
commands:
|
|
- export IMAGE_TAG=$CI_COMMIT_TAG
|
|
- printf "$KUBE_CONFIG_CONTENT" > /tmp/kubeconfig
|
|
- export KUBECONFIG=/tmp/kubeconfig
|
|
- ./deployment/deploy.sh
|
|
when:
|
|
- event: tag
|