.gitlab-ci.yml

variables:
  DOCKER_HOST: "tcp://docker-dind.gitlab-suma:2375"
  DOCKER_BUILD_IMAGE: docker:20.10.15
  DOCKER_IMAGE_NAME: keymanager
  DOCKER_TAG_NAME: latest
  HELM_RELEASE_NAME: backups
  KUBERNETES_NAMESPACE: backups
  KUBERNETES_DEPLOY_IMAGE: alpine/k8s:1.24.4

stages:
  - build

build:
  stage: build
  image: ${DOCKER_BUILD_IMAGE}
  before_script:
    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
  script:
    - docker build --network=host -t ${CI_REGISTRY_IMAGE}/${DOCKER_IMAGE_NAME}:${DOCKER_TAG_NAME} ./build/pass
    - docker push ${CI_REGISTRY_IMAGE}/${DOCKER_IMAGE_NAME}:${DOCKER_TAG_NAME}
  after_script:
    - docker logout $CI_REGISTRY

update_secret:
  stage: build
  image: ${KUBERNETES_DEPLOY_IMAGE}
  before_script:
    - kubectl config use-context open-source/metager-keymanager:gitlab-agent
  script: |
    kubectl -n ${KUBERNETES_NAMESPACE} create secret generic ${HELM_RELEASE_NAME} \
      --from-file=production.json=${PRODUCTION_CONFIG} \
      --dry-run=client \
      --save-config \
      -o yaml | \
      kubectl apply -f -