ci: stop treating registry host as secret
This commit is contained in:
parent
aafbe4dada
commit
828113cc47
5 changed files with 5 additions and 11 deletions
|
|
@ -10,8 +10,7 @@ steps:
|
|||
- name: build-base-image
|
||||
image: woodpeckerci/plugin-docker-buildx:5.0.0
|
||||
settings:
|
||||
registry:
|
||||
from_secret: REGISTRY_HOSTPORT
|
||||
registry: registry.nxtgauge.com
|
||||
repo: nxtgauge-rust-base
|
||||
context: .
|
||||
dockerfile: Dockerfile.base
|
||||
|
|
|
|||
|
|
@ -87,8 +87,7 @@ steps:
|
|||
- name: build-docker
|
||||
image: woodpeckerci/plugin-docker-buildx:5.0.0
|
||||
settings:
|
||||
registry:
|
||||
from_secret: REGISTRY_HOSTPORT
|
||||
registry: registry.nxtgauge.com
|
||||
repo: nxtgauge-rust-${SERVICE}
|
||||
dockerfile: Dockerfile.binary
|
||||
build_args:
|
||||
|
|
|
|||
|
|
@ -29,8 +29,7 @@ steps:
|
|||
- name: build-and-push
|
||||
image: registry.nxtgauge.com/docker:28-cli
|
||||
environment:
|
||||
REGISTRY_HOSTPORT:
|
||||
from_secret: REGISTRY_HOSTPORT
|
||||
REGISTRY_HOSTPORT: registry.nxtgauge.com
|
||||
REGISTRY_USERNAME:
|
||||
from_secret: REGISTRY_USERNAME
|
||||
REGISTRY_PASSWORD:
|
||||
|
|
@ -52,8 +51,7 @@ steps:
|
|||
- name: build-and-push-migrate
|
||||
image: registry.nxtgauge.com/docker:28-cli
|
||||
environment:
|
||||
REGISTRY_HOSTPORT:
|
||||
from_secret: REGISTRY_HOSTPORT
|
||||
REGISTRY_HOSTPORT: registry.nxtgauge.com
|
||||
REGISTRY_USERNAME:
|
||||
from_secret: REGISTRY_USERNAME
|
||||
REGISTRY_PASSWORD:
|
||||
|
|
|
|||
|
|
@ -4,10 +4,9 @@ The following Woodpecker secrets are required for CI/CD pipelines:
|
|||
|
||||
| Secret Name | Purpose |
|
||||
| -------------------- | -------------------------------------------------------------- |
|
||||
| `REGISTRY_HOSTPORT` | Registry host:port (e.g., `registry.nxtgauge.com`) |
|
||||
| `REGISTRY_USERNAME` | Registry username for authentication |
|
||||
| `REGISTRY_PASSWORD` | Registry password/token for authentication |
|
||||
|
||||
## Usage
|
||||
|
||||
All build/push steps use these secrets via `from_secret:` references. No credentials are hardcoded in pipeline files.
|
||||
Build/push steps use `REGISTRY_USERNAME` and `REGISTRY_PASSWORD` via `from_secret:` references.
|
||||
|
|
|
|||
|
|
@ -20,7 +20,6 @@ See `docs/MIGRATION_MASTER_PLAN.md` for full staged plan.
|
|||
## CI (Woodpecker)
|
||||
|
||||
Required secrets:
|
||||
- `REGISTRY_HOSTPORT`
|
||||
- `REGISTRY_USERNAME`
|
||||
- `REGISTRY_PASSWORD`
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue