decrypt the npm auth before publishing the new package

Philmod · Jan 28, 2018 · af10130 · af10130
1 parent df297a3
commit af10130
Showing 1 changed file with 21 additions and 3 deletions.
diff --git a/cloudbuild.yaml b/cloudbuild.yaml
@@ -1,9 +1,27 @@
 steps:
-- name: 'busybox'
-  args: ['echo', '$TAG_NAME']
+- name: 'gcr.io/cloud-builders/gcloud'
+  args:
+  - kms
+  - decrypt
+  - --ciphertext-file=npmrc.enc
+  - --plaintext-file=/root/.npmrc
+  - --location=global
+  - --keyring=my-keyring
+  - --key=npm-key
+  volumes:
+  - name: 'home'
+    path: /root/
+
 - name: 'gcr.io/cloud-builders/npm'
   args: ['install']
+
 - name: 'gcr.io/cloud-builders/npm'
   args: ['test']
+
 - name: 'gcr.io/cloud-builders/npm'
-  args: ['publish', '$TAG_NAME']
+  args: ['publish']
+  env:
+  - HOME=/root/
+  volumes:
+  - name: 'home'
+    path: /root/