Hi, so glad that the 1.0.0-rc.5 released, I tired to enable the global secrets feature in my project but not work, please let me know if I missed something.
Here is the k8s deploy file:
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: drone-secrets
namespace: default
labels:
app: drone-secrets
spec:
replicas: 1
selector:
matchLabels:
app: drone-secrets
template:
metadata:
labels:
app: drone-secrets
spec:
containers:
- name: drone-secrets
image: drone/kubernetes-secrets
env:
- name: SECRET_KEY
value: hex_string
ports:
- name: http
containerPort: 3000
restartPolicy: Always
---
kind: Service
apiVersion: v1
metadata:
name: drone-secrets-service
namespace: default
spec:
selector:
app: drone-secrets
ports:
- protocol: TCP
port: 80
targetPort: 3000
name: http
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: drone-server
namespace: default
labels:
app: drone-server
spec:
replicas: 1
selector:
matchLabels:
app: drone-server
template:
metadata:
labels:
app: drone-server
spec:
containers:
- name: drone-server
image: drone/drone:1.0.0-rc.5
env:
- name: DRONE_KUBERNETES_ENABLED
value: "true"
- name: DRONE_KUBERNETES_NAMESPACE
value: default
- name: DRONE_SECRET_SECRET
value: hex_string
- name: DRONE_SECRET_ENDPOINT
value: http://drone-secrets-service
Here is the k8s secrets:
---
apiVersion: v1
kind: Secret
type: Opaque
data:
username: base64_string
password: base64_string
metadata:
name: drone-secrets
Here is the drone.yml
kind: pipeline
name: deploy
steps:
- name: pre-check
image: docker
environment:
USERNAME:
from_secret: username
PASSWORD:
from_secret: password
commands:
- echo $USERNAME
- echo $PASSWORD
---
kind: secret
external_data:
username:
path: drone-secrets
name: username
password:
path: drone-secrets
name: password
Finally, I didnt get the secret print on console, output is blank
+ echo $USERNAME
+ echo $PASSWORD
