From 5b88959e8a9f0611f7c0e9f8f12ca954cf280c2a Mon Sep 17 00:00:00 2001
From: killingdruid <admin@mikhailkilin.ru>
Date: Sat, 14 Feb 2026 15:53:27 +0000
Subject: [PATCH] [skip ci] Fix woodpecker pipeline escaping

---
 .woodpecker.yml | 32 ++++++++++++++++++++++++--------
 1 file changed, 24 insertions(+), 8 deletions(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 31d778f..9336ca4 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -5,21 +5,37 @@ when:
 steps:
   - name: build-and-push
     image: gcr.io/kaniko-project/executor:debug
+    environment:
+      DOCKER_USERNAME:
+        from_secret: docker_username
+      DOCKER_PASSWORD:
+        from_secret: docker_password
     commands:
       - mkdir -p /kaniko/.docker
-      - echo "{\"auths\":{\"git.mikhailkilin.ru\":{\"username\":\"${DOCKER_USERNAME}\",\"password\":\"${DOCKER_PASSWORD}\"}}}" > /kaniko/.docker/config.json
-      - /kaniko/executor --context=. --destination=git.mikhailkilin.ru/killingdruid/bcard:${CI_COMMIT_SHA:0:8} --destination=git.mikhailkilin.ru/killingdruid/bcard:latest --insecure --skip-tls-verify
-    secrets: [docker_username, docker_password]
+      - >-
+        printf '{"auths":{"git.mikhailkilin.ru":{"username":"%s","password":"%s"}}}'
+        "$DOCKER_USERNAME" "$DOCKER_PASSWORD" > /kaniko/.docker/config.json
+      - >-
+        /kaniko/executor
+        --context=.
+        --destination=git.mikhailkilin.ru/killingdruid/bcard:${CI_COMMIT_SHA:0:8}
+        --destination=git.mikhailkilin.ru/killingdruid/bcard:latest
+        --insecure
+        --skip-tls-verify
 
   - name: update-manifests
     image: alpine
+    environment:
+      DOCKER_USERNAME:
+        from_secret: docker_username
+      DOCKER_PASSWORD:
+        from_secret: docker_password
     commands:
-      - apk add --no-cache git curl
+      - apk add --no-cache git sed
       - TAG=${CI_COMMIT_SHA:0:8}
-      - "sed -i \"s|image: git.mikhailkilin.ru/killingdruid/bcard:.*|image: git.mikhailkilin.ru/killingdruid/bcard:$TAG|\" k8s/bcard.yaml"
+      - sed -i "s|image:.*killingdruid/bcard:.*|image: git.mikhailkilin.ru/killingdruid/bcard:$TAG|" k8s/bcard.yaml
       - git config user.email "ci@mikhailkilin.ru"
       - git config user.name "Woodpecker CI"
       - git add k8s/bcard.yaml
-      - "git diff --cached --quiet && echo \"No changes\" || git commit -m \"[skip ci] deploy bcard:$TAG\""
-      - git push https://${DOCKER_USERNAME}:${DOCKER_PASSWORD}@git.mikhailkilin.ru/killingdruid/bcard.git HEAD:main
-    secrets: [docker_username, docker_password]
+      - git diff --cached --quiet && echo "No changes" || git commit -m "[skip ci] deploy bcard:$TAG"
+      - git push https://$DOCKER_USERNAME:$DOCKER_PASSWORD@git.mikhailkilin.ru/killingdruid/bcard.git HEAD:main
\ No newline at end of file