fix: use PLUGIN_ prefix for secrets in update step

This commit is contained in:
2026-02-15 00:06:50 +00:00
parent c2e1678416
commit 61fe2af94a

View File

@@ -20,14 +20,15 @@ steps:
- name: update-manifests
image: alpine/curl
environment:
GITEA_TOKEN:
settings:
token:
from_secret: gitea_token
commands:
- apk add --no-cache jq sed
- 'FILE_SHA=$(curl -sk -H "Authorization: token ${GITEA_TOKEN}" "https://git.mikhailkilin.ru/api/v1/repos/killingdruid/bcard/contents/k8s/bcard.yaml" | jq -r .sha)'
- 'CURRENT=$(curl -sk -H "Authorization: token ${GITEA_TOKEN}" "https://git.mikhailkilin.ru/api/v1/repos/killingdruid/bcard/raw/k8s/bcard.yaml")'
- 'UPDATED=$(echo "$CURRENT" | sed "s#image: git.mikhailkilin.ru/killingdruid/bcard:.*#image: git.mikhailkilin.ru/killingdruid/bcard:${CI_COMMIT_SHA}#")'
- 'NEW_CONTENT=$(echo "$UPDATED" | base64 -w 0)'
- 'curl -sk -X PUT -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/json" -d "{\"content\":\"${NEW_CONTENT}\",\"message\":\"[CI SKIP] deploy: ${CI_COMMIT_SHA}\",\"sha\":\"${FILE_SHA}\"}" "https://git.mikhailkilin.ru/api/v1/repos/killingdruid/bcard/contents/k8s/bcard.yaml"'
- echo "Manifest updated successfully"
- apk add --no-cache jq sed > /dev/null 2>&1
- 'FILE_SHA=$(curl -sk -H "Authorization: token $PLUGIN_TOKEN" "https://git.mikhailkilin.ru/api/v1/repos/killingdruid/bcard/contents/k8s/bcard.yaml" | jq -r .sha)'
- 'echo "File SHA: $FILE_SHA"'
- 'CURRENT=$(curl -sk -H "Authorization: token $PLUGIN_TOKEN" "https://git.mikhailkilin.ru/api/v1/repos/killingdruid/bcard/raw/k8s/bcard.yaml")'
- 'UPDATED=$(echo "$CURRENT" | sed "s#image: git.mikhailkilin.ru/killingdruid/bcard:.*#image: git.mikhailkilin.ru/killingdruid/bcard:$CI_COMMIT_SHA#")'
- 'NEW_CONTENT=$(printf "%s" "$UPDATED" | base64 -w 0)'
- 'RESULT=$(curl -sk -X PUT -H "Authorization: token $PLUGIN_TOKEN" -H "Content-Type: application/json" -d "{\"content\":\"$NEW_CONTENT\",\"message\":\"[CI SKIP] deploy: $CI_COMMIT_SHA\",\"sha\":\"$FILE_SHA\"}" "https://git.mikhailkilin.ru/api/v1/repos/killingdruid/bcard/contents/k8s/bcard.yaml")'
- 'echo "$RESULT" | jq -r ".content.name // .message"'