local util = { fromSecret(secret): { from_secret: secret, }, secret(secret): std.asciiLower( std.strReplace( secret, '_', '-', ), ), environment(secret): std.asciiUpper( std.strReplace( secret, '-', '_', ), ), env(secret): std.asciiLower( std.strReplace( secret, '-', '_', ), ), printEnv(file, env): function(step) step { environment +: { [util.environment(env)]: util.fromSecret( util.secret(env) ), }, settings +: { envs +: [ util.env(env), ], script +: [ 'echo "export %(environment)s=\'$${%(environment)s}\'" >> %(file)s # "%(secret)s"' % { environment: util.environment(env), file: file, secret: util.secret(env), }, ], }, }, }; local images = { docker: { name: 'docker', image: 'docker:dind', }, scp(target): { name: 'scp', image: 'appleboy/drone-scp', settings: { host: { from_secret: 'ssh-host', }, username: { from_secret: 'ssh-user', }, password: { from_secret: 'ssh-password', }, port: { from_secret: 'ssh-port', }, command_timeout: '2m', target: target, source: [ '.', ], }, }, ssh: { image: 'appleboy/drone-ssh', settings: { host: util.fromSecret("ssh-host"), port: util.fromSecret("ssh-port"), username: util.fromSecret("ssh-user"), password: util.fromSecret("ssh-password"), script: [], }, }, wait(delay): { image: 'alpine', name: 'wait', commands: [ 'sleep %s' % delay, ], } }; [ { kind: 'pipeline', type: 'docker', name: 'build', clone: { disable: false, depth: 0, }, services: [ images.docker { privileged: true, volumes: [ { name: 'dockersock', path: '/var/run', }, { name: 'ca', path: '/etc/docker/certs.d', }, ], }, ], volumes: [ { name: 'dockersock', temp: {}, }, { name: 'ca', host: { path: '/etc/docker/certs.d', }, }, { name: 'ssh', host: { path: '/home/giles/.ssh' }, }, ], steps:[ images.scp( '/stack/root' ), images.wait(15), util.printEnv( 'afile', 'ssh_host', )( images.ssh { name: 'will print ssh-host', }, ) ], } ]