recipe-maintainers/cc-ci
0
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Merge pull request 'drone: scope have_secret to the stack' (#41) from fix-drone-secret-scope into main
continuous-integration/drone/push Build is pending
Details

Browse Source
This commit was merged in pull request #41.
This commit is contained in:
autonomic-bot
2026-09-21 17:00:30 +00:00
parent c5106bc1eb afe7a10758
commit 46ad39145a
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nix/modules/drone.nix
+4 -1
View File
@@ -52,7 +52,10 @@ let
set_env DRONE_ENV_VERSION "v1"
set_env COMPOSE_FILE '"compose.yml:compose.gitea.yml"'
have_secret() { docker secret ls --format '{{.Name}}' | grep -q "_$1_v1$"; }
# Stack-scoped: secret names are prefixed with the app's stack name, so during the
# 2026-09 domain rename the OLD stack's *_rpc_secret_v1 must not satisfy this check.
DRONE_STACK="drone_ci_autonomic_zone"
have_secret() { docker secret ls --format '{{.Name}}' | grep -q "^${DRONE_STACK}_$1_v1$"; }
have_secret rpc_secret || abra app secret insert "$DRONE_DOMAIN" rpc_secret v1 /run/secrets/drone_rpc_secret -f -n
have_secret client_secret || abra app secret insert "$DRONE_DOMAIN" client_secret v1 /run/secrets/drone_gitea_client_secret -f -n