cuddle-templates/cuddle-infrastructure/.drone.yml

kind: pipeline
name: default
type: docker

steps:
  - name: load_secret
    image: debian:buster-slim
    volumes:
      - name: ssh
        path: /root/.ssh/
    environment:
      SSH_KEY:
        from_secret: gitea_id_ed25519
    commands:
      - mkdir -p $HOME/.ssh/
      - echo "$SSH_KEY" | base64 -d > $HOME/.ssh/id_ed25519
      - chmod -R 600 ~/.ssh
      - |
        cat >$HOME/.ssh/config <<EOL
        Host git.front.kjuulh.io
          IdentityFile $HOME/.ssh/id_ed25519
          IdentitiesOnly yes
          UserKnownHostsFile=/dev/null
          StrictHostKeyChecking no
        EOL
      - chmod 700 ~/.ssh/config

  - name: build pr
    image: kasperhermansen/cuddle:latest
    pull: always
    volumes:
      - name: ssh
        path: /root/.ssh/
      - name: ci
        path: /mnt/ci
    commands:
      - eval `ssh-agent`
      - ssh-add
      - echo "$DOCKER_PASSWORD" | docker login  --password-stdin --username="$DOCKER_USERNAME" docker.io
      - apk add git
      - $CI_PREFIX pr
    environment:
      DOCKER_BUILDKIT: 1
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
      CUDDLE_SECRETS_PROVIDER: 1password
      CUDDLE_ONE_PASSWORD_DOT_ENV: ".env.ci"
      CUDDLE_SSH_AGENT: "true"
      CI_PREFIX: "/mnt/ci/ci"
      CUDDLE_PLEASE_TOKEN:
        from_secret: cuddle_please_token
      OP_SERVICE_ACCOUNT_TOKEN:
        from_secret: op_service_account_token
    when:
      event:
        - pull_request
      exclude:
        - main
        - master
    depends_on:
      - "load_secret"

  - name: build main
    image: kasperhermansen/cuddle-infrastructure-plan:main-1706481826
    pull: always
    volumes:
      - name: ssh
        path: /root/.ssh/
    commands:
      - eval `ssh-agent`
      - ssh-add
      - echo "$DOCKER_PASSWORD" | docker login  --password-stdin --username="$DOCKER_USERNAME" docker.io
      - export CLUSTER=clank-prod
      - export IMAGE_TAG=something
      - cuddle-infrastructure-plan main
    environment:
      REGISTRY_CACHE_USERNAME:
        from_secret: registry_cache_username
      REGISTRY_CACHE_PASSWORD:
        from_secret: registry_cache_password
      REGISTRY_CACHE_TOKEN:
        from_secret: registry_cache_token
      REGISTRY_CACHE_url:
        from_secret: registry_cache_url
      DOCKER_BUILDKIT: 1
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
      CUDDLE_SECRETS_PROVIDER: 1password
      CUDDLE_ONE_PASSWORD_DOT_ENV: ".env.ci"
      CUDDLE_SSH_AGENT: "true"
      GIT_PASSWORD:
        from_secret: git_password
      CI_PREFIX: "/mnt/ci/ci"
      DOCKER_HOST: "tcp://192.168.1.233:2376"
      CUDDLE_PLEASE_TOKEN:
        from_secret: cuddle_please_token
      OP_SERVICE_ACCOUNT_TOKEN:
        from_secret: op_service_account_token
    when:
      event:
        - push
      branch:
        - main
        - master
      exclude:
        - pull_request
    depends_on:
      - "load_secret"

  - name: deploy release
    image: kasperhermansen/cuddle:latest
    pull: always
    volumes:
      - name: ssh
        path: /root/.ssh/
      - name: dockersock
        path: /var/run
      - name: ci
        path: /mnt/ci
    commands:
      - eval `ssh-agent`
      - ssh-add
      - echo "$DOCKER_PASSWORD" | docker login  --password-stdin --username="$DOCKER_USERNAME" docker.io
      - apk add git
      - cuddle x ci:release
    environment:
      DOCKER_BUILDKIT: 1
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
      CUDDLE_SECRETS_PROVIDER: 1password
      CUDDLE_ONE_PASSWORD_DOT_ENV: ".env.ci"
      CUDDLE_SSH_AGENT: "true"
      CI_PREFIX: "/mnt/ci/ci"
      CUDDLE_PLEASE_TOKEN:
        from_secret: cuddle_please_token
      OP_SERVICE_ACCOUNT_TOKEN:
        from_secret: op_service_account_token
    when:
      event:
        - tag
      ref:
        include:
        - refs/tags/v*
    depends_on:
      - "load_secret"

volumes:
  - name: ssh
    temp: {}