local publicSecrets = [ 'ssh-host', 'ssh-user', ]; local secretSecrets = [ 'ssh-passwoprd', ]; local util = { // the head of an array head(array): array[0], // the tail of an array tail(array): std.makeArray( std.length(array) -1, function(x) array[x + 1], ), // compose an array of functions compose(functions): local compose(functions) = if std.length(functions) == 0 then local ret(object) = object; ret else local ret(object) = compose( util.tail( functions, ) )( util.head( functions, )(object) ); ret; compose(functions), fromSecret(secret): { from_secret: secret, }, secret(secret): std.asciiLower( std.strReplace( secret, '_', '-', ), ), environment(secret): std.asciiUpper( std.strReplace( secret, '-', '_', ), ), env(secret): std.asciiLower( std.strReplace( secret, '-', '_', ), ), envSet(env): function(step) step { environment +: { [util.environment(env)]: util.fromSecret( util.secret(env) ), }, settings +: { envs +: [ util.env(env), ], }, }, printEnv(file, env): function(step) envSet(env)(step) { settings +: { script +: [ 'echo "export %(environment)s=\'$${%(environment)s}\'" >> %(file)s # "%(secret)s"' % { environment: util.environment(env), file: file, secret: util.secret(env), }, ], }, }, }; local images = { docker: { name: 'docker', image: 'docker:dind', }, scp(target): { name: 'scp', image: 'appleboy/drone-scp', settings: { host: { from_secret: 'ssh-host', }, username: { from_secret: 'ssh-user', }, password: { from_secret: 'ssh-password', }, port: { from_secret: 'ssh-port', }, command_timeout: '2m', target: target, source: [ '.', ], }, }, ssh: { image: 'appleboy/drone-ssh', settings: { host: util.fromSecret("ssh-host"), port: util.fromSecret("ssh-port"), username: util.fromSecret("ssh-user"), password: util.fromSecret("ssh-password"), script: [], }, }, wait(delay): { image: 'alpine', name: 'wait', commands: [ 'sleep %s' % delay, ], } }; [ { kind: 'pipeline', type: 'docker', name: 'build', clone: { disable: false, depth: 0, }, services: [ images.docker { privileged: true, volumes: [ { name: 'dockersock', path: '/var/run', }, { name: 'ca', path: '/etc/docker/certs.d', }, ], }, ], volumes: [ { name: 'dockersock', temp: {}, }, { name: 'ca', host: { path: '/etc/docker/certs.d', }, }, ], steps:[ images.scp( '/stack/root' ), images.wait(15), util.compose( std.map( function(secret) util.printEnv('afile', secret), secrets, ) )( images.ssh { name: 'will print ssh-host again', settings +: { script +: [ 'rm afile' ], }, }, ),/* images.ssh { name: 'deploy portainer', "environment": environment(secrets), "settings": { "envs": [x.replace("-", "_") for x in secrets ], username: util.fromSecret("ssh-root-user"), password: util.fromSecret("ssh-root-password"), script: [ 'set -e', 'echo go', ] + map(export, secrets) + [ "export DRONE_REPO_LINK=$${{DRONE_GITEA_SERVER}}/{namespace}/{name}".format(name=ctx.repo.name, namespace=ctx.repo.namespace), "export DRONE_COMMIT={commit}".format(commit=ctx.build.commit), "docker network prune -f", "cd {folder}".format(folder=folder), "docker stack rm {name}".format(name = name), "sleep 30", "docker stack deploy -c {filename} {name}".format(name= name, filename = filename), ] + commands } }*/ ], } ]