feat: added registry token secret

filipeforattini · May 3, 2022 · 8af5080 · 8af5080
1 parent c1f6b1f
commit 8af5080
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/.github/workflows/service-push.yml b/.github/workflows/service-push.yml
@@ -296,6 +296,7 @@ jobs:
           echo "::set-output name=docker_image_fullname::$(echo $PIPELINE_SETUP | jq -r '.dockerfile.imageFullname')"
           echo "::set-output name=docker_image_tags::$(echo $PIPELINE_SETUP | jq -r '.dockerfile.tagsAsString')"
           echo "::set-output name=docker_main_image::$(echo $PIPELINE_SETUP | jq -r '.dockerfile.mainImage')"
+          echo "::set-output name=deploy_repository::$(echo $PIPELINE_SETUP | jq -r '.deploy.repository')"
 
       # pre-build
       - name: Config | Create .dockerignore
@@ -341,6 +342,22 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Delete login token
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          args: delete secret registry-token -n ${{steps.node_setup.outputs.deploy_repository}} --ignore-not-found
+
+      - name: Update login token
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          args: create secret generic registry-token -n ${{steps.deploy_setup.outputs.deploy_repository}} --from-file=.dockerconfigjson=$HOME/.docker/config.json --type=kubernetes.io/dockerconfigjson
+
       - name: Build and push
         uses: docker/build-push-action@v2
         with:
@@ -430,6 +447,15 @@ jobs:
         with:
           args: delete secret svc -n ${{steps.deploy_setup.outputs.deploy_repository}} --ignore-not-found
 
+      - name: Delete K8s secrets versioned
+        if: steps.deploy_setup.outputs.deploy_as_k8s == 'true'
+        uses: actions-hub/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          args: delete secret svc-${{needs.Release-Node.outputs.Version}} -n ${{steps.deploy_setup.outputs.deploy_repository}} --ignore-not-found
+
       - name: Create K8s secrets
         if: steps.deploy_setup.outputs.deploy_as_k8s == 'true'
         uses: actions-hub/kubectl@master

diff --git a/deploy/as-k8s/service.yml b/deploy/as-k8s/service.yml
@@ -98,6 +98,8 @@ spec:
       #@ deploymentTemplateLabels.update(data.values.deployment.templateLabels)
       labels: #@ deploymentTemplateLabels
     spec:
+      imagePullSecrets:
+        - name: registry-token
       containers:
         - name: #@ data.values.deployment.name
           image: #@ "{}/{}/{}:{}".format(data.values.containerRegistry, data.values.organization, data.values.repository, data.values.tag)