mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
d301ebe47c
* [CI] Fix pipeline dependencies
This change ensures that CI_BYPASS works as intended and ensures that the hardcoded pipeline does not conflict with the repo provided dynamic pipeline.
The hardcoded pipeline has been changed to reflect the following:
```yaml
steps:
# Blocking pipeline for master branch deployments (concurrency_group).
- label: ":pipeline: Setup Pipeline"
command: ".buildkite/pipeline.sh | buildkite-agent pipeline upload"
concurrency: 1
concurrency_group: "deployments"
if: build.branch == "master"
# Non-blocking pipeline for all others (tagged commits/local branches/PRs).
- label: ":pipeline: Setup Pipeline"
command: ".buildkite/pipeline.sh | buildkite-agent pipeline upload"
if: build.branch != "master"
- wait:
if: build.pull_request.repository.fork != true && build.branch !~ /^dependabot\/.*/
# Manual intervention by team required to deploy for forked PRs (prevent secret leakage).
- block: "Public fork needs approval"
if: build.pull_request.repository.fork == true
# Blocking deployment for master branch deployments (concurrency_group).
- label: "🚀 Setup Deployment"
command: ".buildkite/deployment.sh | buildkite-agent pipeline upload"
concurrency: 1
concurrency_group: "deployments"
depends_on: ~
if: build.branch == "master"
# Non-blocking deployment for all others (tagged commits/local branches).
- label: "🚀 Setup Deployment"
command: ".buildkite/deployment.sh | buildkite-agent pipeline upload"
depends_on: ~
if: build.branch != "master" && build.branch !~ /^dependabot\/.*/ && build.pull_request.repository.fork != true
# Removed dependency optimisation for forked PRs to enforce block step.
- label: "🚀 Setup Deployment"
command: ".buildkite/deployment.sh | buildkite-agent pipeline upload"
if: build.pull_request.repository.fork == true
```
* [CI] Include upstream hardcoded pipeline in repo
29 lines
557 B
Bash
Executable File
29 lines
557 B
Bash
Executable File
#!/bin/bash
|
|
set -eu
|
|
|
|
for BUILD_ARCH in amd64 arm32v7 arm64v8; do
|
|
cat << EOF
|
|
- label: ":docker: Deploy Image [${BUILD_ARCH}]"
|
|
command: "authelia-scripts docker push-image --arch=${BUILD_ARCH}"
|
|
depends_on:
|
|
EOF
|
|
if [[ "${BUILD_ARCH}" == "amd64" ]]; then
|
|
cat << EOF
|
|
- "build-docker-linux-amd64"
|
|
EOF
|
|
elif [[ "${BUILD_ARCH}" == "arm32v7" ]]; then
|
|
cat << EOF
|
|
- "build-docker-linux-arm32v7"
|
|
EOF
|
|
else
|
|
cat << EOF
|
|
- "build-docker-linux-arm64v8"
|
|
EOF
|
|
fi
|
|
cat << EOF
|
|
agents:
|
|
upload: "fast"
|
|
env:
|
|
ARCH: "${BUILD_ARCH}"
|
|
EOF
|
|
done |