.drone.yml

---
kind: pipeline
type: docker
name: build-master

clone:
  depth: 50

platform:
  os: linux
  arch: amd64

# Set the project as Trusted in Drone project settings to let it use volumes
volumes:
- name: dockersock
  host:
    path: /var/run/docker.sock
- name: cache-docker-buildx-0.5.1
  host:
    path: /tmp/drone/cache/docker-buildx-0.5.1

steps:

# Multi-platform build, downloading buildx only when not cached
# @see: https://docs.drone.io/pipeline/docker/examples/services/docker/
- name: build-docker
  image: docker:dind
  volumes:
  - name: dockersock
    path: /var/run/docker.sock
  - name: cache-docker-buildx-0.5.1
    path: /root/.docker/cli-plugins
  environment:
    DOCKER_CLI_EXPERIMENTAL: enabled
    DOCKERHUB_PASSWORD:
      from_secret: dockerhub_kubekarp_access_token
    QUAY_PASSWORD:
      from_secret: quay_kubekarp_encrypted_pass
    HARBOR_FQDN:
      from_secret: harbor_registry_fqdn
    HARBOR_REPO:
      from_secret: harbor_repo
    HARBOR_USERNAME:
      from_secret: harbor_robot_kubekarp_push_username
    HARBOR_PASSWORD:
      from_secret: harbor_robot_kubekarp_push_password
  commands:
  - |
      (
        set -x; \
        FILE=~/.docker/cli-plugins/docker-buildx; \
        [ ! -f $FILE ] && \
          wget -O $FILE https://github.com/docker/buildx/releases/download/v0.5.1/buildx-v0.5.1.linux-amd64 \
          && chmod +x $FILE \
        || true
      )
  - docker login --username immanuelfodor --password "$DOCKERHUB_PASSWORD"
  - docker login --username immanuelfodor --password "$QUAY_PASSWORD" quay.io
  - docker login $HARBOR_FQDN --username "$HARBOR_USERNAME" --password "$HARBOR_PASSWORD"
  - docker buildx create --use
  - |
      docker buildx build \
        --platform linux/arm,linux/arm64,linux/amd64 \
        --tag $HARBOR_REPO:${DRONE_COMMIT_SHA:0:10}-${DRONE_BUILD_NUMBER} \
        --tag $HARBOR_REPO:master \
        --tag immanuelfodor/kube-karp:master \
        --tag quay.io/immanuelfodor/kube-karp:master \
        --push \
        .

# @see: http://plugins.drone.io/drone-plugins/drone-webhook/
# @see: https://keel.sh/docs/#webhooks
- name: deploy-k8s
  image: plugins/webhook
  settings:
    urls:
      from_secret: keel_webhook_url
    content_type: application/json
    template:
      from_secret: keel_native_payload_repo_tag_commit

# @see: http://plugins.drone.io/drone-plugins/drone-webhook/
# @see: https://github.com/drone-plugins/drone-webhook/blob/master/plugin.go
- name: notify-done
  image: plugins/webhook
  failure: ignore
  settings:
    urls:
      from_secret: done_webhook_url
    content_type: application/json
    template: |
      {
        "build": "#{{ build.number }} {{ build.status }} @ {{ repo.owner }}/{{ repo.name }} on branch {{ build.branch }}",
        "message": "{{ trim build.message }}",
        "url": "{{ build.link }}",
        "commit": "{{ truncate build.commit 10 }}"
      }

trigger:
  branch:
  - master
  event:
  - push

---
kind: pipeline
type: docker
name: build-tag

clone:
  depth: 50

platform:
  os: linux
  arch: amd64

# Set the project as Trusted in Drone project settings to let it use volumes
volumes:
- name: dockersock
  host:
    path: /var/run/docker.sock
- name: cache-docker-buildx-0.5.1
  host:
    path: /tmp/drone/cache/docker-buildx-0.5.1

steps:

# Multi-platform build, downloading buildx only when not cached
# @see: https://docs.drone.io/pipeline/docker/examples/services/docker/
- name: build-docker
  image: docker:dind
  volumes:
  - name: dockersock
    path: /var/run/docker.sock
  - name: cache-docker-buildx-0.5.1
    path: /root/.docker/cli-plugins
  environment:
    DOCKER_CLI_EXPERIMENTAL: enabled
    DOCKERHUB_PASSWORD:
      from_secret: dockerhub_kubekarp_access_token
    QUAY_PASSWORD:
      from_secret: quay_kubekarp_encrypted_pass
  commands:
  - |
      (
        set -x; \
        FILE=~/.docker/cli-plugins/docker-buildx; \
        [ ! -f $FILE ] && \
          wget -O $FILE https://github.com/docker/buildx/releases/download/v0.5.1/buildx-v0.5.1.linux-amd64 \
          && chmod +x $FILE \
        || true
      )
  - docker login --username immanuelfodor --password "$DOCKERHUB_PASSWORD"
  - docker login --username immanuelfodor --password "$QUAY_PASSWORD" quay.io
  - docker buildx create --use
  - |
      docker buildx build \
        --platform linux/arm,linux/arm64,linux/amd64 \
        --tag immanuelfodor/kube-karp:$DRONE_TAG \
        --tag immanuelfodor/kube-karp:$(echo "${DRONE_TAG}" | cut -d'.' -f 1-2) \
        --tag immanuelfodor/kube-karp:$(echo "${DRONE_TAG}" | cut -d'.' -f 1) \
        --tag quay.io/immanuelfodor/kube-karp:$DRONE_TAG \
        --tag quay.io/immanuelfodor/kube-karp:$(echo "${DRONE_TAG}" | cut -d'.' -f 1-2) \
        --tag quay.io/immanuelfodor/kube-karp:$(echo "${DRONE_TAG}" | cut -d'.' -f 1) \
        --push \
        .

# @see: http://plugins.drone.io/drone-plugins/drone-webhook/
# @see: https://github.com/drone-plugins/drone-webhook/blob/master/plugin.go
- name: notify-done
  image: plugins/webhook
  failure: ignore
  settings:
    urls:
      from_secret: done_webhook_url
    content_type: application/json
    template: |
      {
        "build": "#{{ build.number }} {{ build.status }} @ {{ repo.owner }}/{{ repo.name }} on tag {{ build.tag }}",
        "message": "{{ trim build.message }}",
        "url": "{{ build.link }}",
        "commit": "{{ truncate build.commit 10 }}"
      }

trigger:
  event:
  - tag