forked from siderolabs/extensions
-
Notifications
You must be signed in to change notification settings - Fork 0
/
.drone.yaml
208 lines (194 loc) · 3.88 KB
/
.drone.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
kind: pipeline
name: default
type: kubernetes
steps:
- name: setup-ci
image: autonomy/build-container:latest
commands:
- git fetch --tags
- install-ci-key
- setup-buildx-amd64-arm64
environment:
SSH_KEY:
from_secret: ssh_key
DOCKER_CLI_EXPERIMENTAL: enabled
resources:
requests:
cpu: 24000
memory: 48GiB
volumes:
- name: outer-docker-socket
path: /var/run
- name: ssh
path: /root/.ssh
- name: buildx
path: /root/.docker/buildx
- name: build-pull-request
image: autonomy/build-container:latest
pull: always
environment:
DOCKER_CLI_EXPERIMENTAL: enabled
commands:
- make
when:
event:
include:
- pull_request
volumes:
- name: outer-docker-socket
path: /var/run
- name: ssh
path: /root/.ssh
- name: buildx
path: /root/.docker/buildx
depends_on:
- setup-ci
- name: build-nonfree-pull-request
image: autonomy/build-container:latest
pull: always
environment:
DOCKER_CLI_EXPERIMENTAL: enabled
commands:
- make nonfree
when:
event:
include:
- pull_request
volumes:
- name: outer-docker-socket
path: /var/run
- name: ssh
path: /root/.ssh
- name: buildx
path: /root/.docker/buildx
depends_on:
- setup-ci
- name: build-and-publish
image: autonomy/build-container:latest
pull: always
environment:
GHCR_USERNAME:
from_secret: ghcr_username
GHCR_PASSWORD:
from_secret: ghcr_token
commands:
- docker login ghcr.io --username "$${GHCR_USERNAME}" --password "$${GHCR_PASSWORD}"
- make PUSH=true
when:
event:
exclude:
- pull_request
volumes:
- name: outer-docker-socket
path: /var/run
- name: ssh
path: /root/.ssh
- name: buildx
path: /root/.docker/buildx
depends_on:
- setup-ci
- name: release-notes
image: autonomy/build-container:latest
pull: always
commands:
- make release-notes
volumes:
- name: docker-socket
path: /var/run
- name: ssh
path: /root/.ssh
- name: buildx
path: /root/.docker/buildx
when:
event:
- tag
depends_on:
- build-and-publish
- name: release
image: plugins/github-release
pull: always
settings:
api_key:
from_secret: github_token
checksum:
- sha256
- sha512
draft: true
files:
- _out/RELEASE_NOTES.md
note: _out/RELEASE_NOTES.md
volumes:
- name: docker-socket
path: /var/run
- name: ssh
path: /root/.ssh
- name: buildx
path: /root/.docker/buildx
when:
event:
- tag
depends_on:
- release-notes
services:
- name: docker
image: docker:20.10-dind
entrypoint:
- dockerd
commands:
- --dns=8.8.8.8
- --dns=8.8.4.4
- --mtu=1500
- --log-level=error
privileged: true
volumes:
- name: docker-socket
path: /var/run
- name: buildx
path: /root/.docker/buildx
- name: ssh
path: /root/.ssh
volumes:
- name: outer-docker-socket
host:
path: /var/ci-docker
- name: docker-socket
temp:
medium: memory
- name: buildx
temp:
medium: memory
- name: ssh
temp:
medium: memory
trigger:
branch:
exclude:
- renovate/*
- dependabot/*
---
kind: pipeline
type: kubernetes
name: notify
clone:
disable: true
steps:
- name: slack
image: plugins/slack
settings:
webhook:
from_secret: slack_webhook
channel: proj-talos-maintainers
when:
status:
- success
- failure
trigger:
branch:
exclude:
- renovate/*
- dependabot/*
status:
- success
- failure
depends_on:
- default