mirror of
https://github.com/grafana/grafana.git
synced 2025-02-25 18:55:37 -06:00
158502572e
* Add aws marketplace automation # Conflicts: # .drone.yml * Fix secret paths # Conflicts: # .drone.yml * Add docker socket # Conflicts: # .drone.yml # Conflicts: # .drone.yml * s/enterprise2/enterprise * Add dependency on the enterprise docker publish # Conflicts: # .drone.yml * Replace testing args with prod args # Conflicts: # .drone.yml * Fix path # Conflicts: # .drone.yml
98 lines
2.9 KiB
Plaintext
98 lines
2.9 KiB
Plaintext
pull_secret = 'dockerconfigjson'
|
|
drone_token = 'drone_token'
|
|
prerelease_bucket = 'prerelease_bucket'
|
|
gcp_upload_artifacts_key = 'gcp_upload_artifacts_key'
|
|
azure_sp_app_id = 'azure_sp_app_id'
|
|
azure_sp_app_pw = 'azure_sp_app_pw'
|
|
azure_tenant = 'azure_tenant'
|
|
|
|
|
|
def from_secret(secret):
|
|
return {'from_secret': secret}
|
|
|
|
|
|
def vault_secret(name, path, key):
|
|
return {
|
|
'kind': 'secret',
|
|
'name': name,
|
|
'get': {
|
|
'path': path,
|
|
'name': key,
|
|
},
|
|
}
|
|
|
|
|
|
def secrets():
|
|
return [
|
|
vault_secret(pull_secret, 'secret/data/common/gcr', '.dockerconfigjson'),
|
|
vault_secret('github_token', 'infra/data/ci/github/grafanabot', 'pat'),
|
|
vault_secret(drone_token, 'infra/data/ci/drone', 'machine-user-token'),
|
|
vault_secret(prerelease_bucket, 'infra/data/ci/grafana/prerelease', 'bucket'),
|
|
vault_secret(
|
|
gcp_upload_artifacts_key,
|
|
'infra/data/ci/grafana/releng/artifacts-uploader-service-account',
|
|
'credentials.json',
|
|
),
|
|
vault_secret(
|
|
azure_sp_app_id,
|
|
'infra/data/ci/datasources/cpp-azure-resourcemanager-credentials',
|
|
'application_id',
|
|
),
|
|
vault_secret(
|
|
azure_sp_app_pw,
|
|
'infra/data/ci/datasources/cpp-azure-resourcemanager-credentials',
|
|
'application_secret',
|
|
),
|
|
vault_secret(
|
|
azure_tenant,
|
|
'infra/data/ci/datasources/cpp-azure-resourcemanager-credentials',
|
|
'tenant_id',
|
|
),
|
|
# Package publishing
|
|
vault_secret(
|
|
'packages_gpg_public_key',
|
|
'infra/data/ci/packages-publish/gpg',
|
|
'public-key',
|
|
),
|
|
vault_secret(
|
|
'packages_gpg_private_key',
|
|
'infra/data/ci/packages-publish/gpg',
|
|
'private-key',
|
|
),
|
|
vault_secret(
|
|
'packages_gpg_passphrase',
|
|
'infra/data/ci/packages-publish/gpg',
|
|
'passphrase',
|
|
),
|
|
vault_secret(
|
|
'packages_service_account',
|
|
'infra/data/ci/packages-publish/service-account',
|
|
'credentials.json',
|
|
),
|
|
vault_secret(
|
|
'packages_access_key_id',
|
|
'infra/data/ci/packages-publish/bucket-credentials',
|
|
'AccessID',
|
|
),
|
|
vault_secret(
|
|
'packages_secret_access_key',
|
|
'infra/data/ci/packages-publish/bucket-credentials',
|
|
'Secret',
|
|
),
|
|
vault_secret(
|
|
'aws_region',
|
|
'secret/data/common/aws-marketplace',
|
|
'aws_region',
|
|
),
|
|
vault_secret(
|
|
'aws_access_key_id',
|
|
'secret/data/common/aws-marketplace',
|
|
'aws_access_key_id',
|
|
),
|
|
vault_secret(
|
|
'aws_secret_access_key',
|
|
'secret/data/common/aws-marketplace',
|
|
'aws_secret_access_key',
|
|
),
|
|
]
|