declare Vault-backed Drone secrets

2026-08-11 11:33:02 +08:00
parent 8971f25023
commit de7147ecce
1 changed files with 26 additions and 6 deletions
@@ -1,3 +1,23 @@
+kind: secret
+name: docker_username
+get:
+  path: drone/data/docker_username
+---
+kind: secret
+name: docker_password
+get:
+  path: drone/data/docker_password
+---
+kind: secret
+name: nexus_username
+get:
+  path: drone/data/nexus_username
+---
+kind: secret
+name: nexus_password
+get:
+  path: drone/data/nexus_password
+---
 kind: pipeline
 name: default

@@ -15,17 +35,17 @@ steps:
    environment:
      DOCKER_CONFIG: /home/gradle/.docker
      JIB_USERNAME:
-        from_secret: drone/data/docker_username
+        from_secret: docker_username
      JIB_PASSWORD:
-        from_secret: drone/data/docker_password
+        from_secret: docker_password
      NEXUS_USERNAME:
-        from_secret: drone/data/nexus_username
+        from_secret: nexus_username
      NEXUS_PASSWORD:
-        from_secret: drone/data/nexus_password
+        from_secret: nexus_password
      NPM_USERNAME:
-        from_secret: drone/data/nexus_username
+        from_secret: nexus_username
      NPM_PASSWORD:
-        from_secret: drone/data/nexus_password
+        from_secret: nexus_password
    commands:
      - |
        if grep -qs ' /cache ' /proc/self/mountinfo && [ -w /cache ]; then