Secret in Drone 1.0.0-rc.1

[SolT31]

How to use secrets in script?
Drone version 1.0.0-rc.1

ssh:
    image: appleboy/drone-ssh
    host: host.com
    username: 
      from_secret: ssh_user
    password:
      from_secret: ssh_password
    port: 22
    script:
      - docker login -u ${DOCKER_USER} -p ${DOCKER_PASS} repo.com

Example from documentation does not work for version 1.0.0 rc.1

[appleboy]

- name: ssh
  image: appleboy/drone-ssh
  settings:
    host: host.com
    username:
      from_secret: ssh_user
    password:
      from_secret: ssh_password
    port: 22
    script:
    - docker login -u ${DOCKER_USER} -p ${DOCKER_PASS} repo.com

see the plugins section of pipeline steps

kind: pipeline
name: default

steps:
- name: build
  image: golang
  commands:
  - go build
  - go test

- name: notify
  image: plugins/slack
  settings:
    room: general
    webhook: https://...

[SolT31]

You do not understand me.

I need to read the secrets of the drone in the script block for authorization in my docker repository.

In Drone version 0.0.5, this worked with the ${DOCKER_PASS} construct.
In the version of Drone 1.0.0-rc.1, this does not work.

[coolyrat]

it would be great if add some example usage for 1.0.0. i am trying to pass secret into the executing script

[droplet-js]

I have the same problem.

- name: ssh-docker-host
  image: appleboy/drone-ssh
  settings:
    host: host.docker.internal
    port: 22
    username:
      from_secret: MAC_USER
    password:
      from_secret: MAC_PASSWORD
    script:
    - date -R
    - system_profiler SPSoftwareDataType
    - bash -lc 'security unlock-keychain -p ${MAC_PASSWORD} login.keychain'
    - bash -lc 'flutter --version'
    - date -R

Example from documentation does not work for version 1.0.0 rc.1

[droplet-js]

^_^ I have solved it.

- name: ssh-docker-host
  image: appleboy/drone-ssh
  environment:
    USERNAME:
      from_secret: MAC_USER
  settings:
    host: host.docker.internal
    port: 22
    username:
      from_secret: MAC_USER
    password:
      from_secret: MAC_PASSWORD
    envs: [ USERNAME ]
    script:
    - date -R
    - system_profiler SPSoftwareDataType
    - bash -lc 'flutter --version'
    - echo $USERNAME
    - echo $${USERNAME}
    - date -R

[coltenkrauter]

@v7lin
Can you please help me? I cannot get secrets to work in scripts...
I created a secret names test and I am trying to use it in ssh command.
This is what I have tried:

- name: Deploy gateway-service
  image: plugins/ssh
  environment:
    TEST:
      from_secret: test
  settings:
    host: coltenkrauter.com
    ssh_key: 
      from_secret: ssh_key
    port: 22
    envs: [TEST]
    script:
      - cd /home/ubuntu
      - echo test
      - echo TEST
      - echo $test
      - echo $${test}
      - echo "$test"
      - echo "$${test}"
      - echo $TEST
      - echo $${TEST}
      - echo "$TEST"
      - echo "$${TEST}"
      - pwd
      - whoami

[droplet-js]

@coltenkrauter
plugins/ssh -> appleboy/drone-ssh

[coltenkrauter]

That did it, thanks @v7lin

[leafney]

thanks @v7lin ,the envs is the key.

[lkqm]

I have a similar problem, echo secret var like *******, causes docker login password error,
and test other when secret value euqals drone secret it's will replaced ******:

using drone v1.6.0:

.drone.yml:

- name: deploy
  image: appleboy/drone-ssh
  environment:
    DOCKER_USER: mmd
    DOCKER_PASS:
      from_secret: docker_pass
  settings:
    host: mario6.me
    port: 6722
    username:
      from_secret: ssh_user_host1
    password:
      from_secret: ssh_pass_host1
    command_timeout: 2m
    envs: [ DOCKER_USER, DOCKER_PASS ]
    script:
      - export DOCKER_REGISTRY=registry.cn-chengdu.aliyuncs.com
      - export DOCKER_IMAGE=registry.cn-chengdu.aliyuncs.com/lkqm/paper-show:${DRONE_TAG=latest}
      - export DOCKER_REGISTRY_USER=$DOCKER_USER
      - export DOCKER_REGISTRY_PASS=$DOCKER_PASS
      - export PATH=/usr/local/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin
      - echo $DOCKER_USER
      - echo ${DOCKER_USER}
      - echo $${DOCKER_USER}
      - echo $DOCKER_PASS
      - echo ${DOCKER_PASS}
      - echo $${DOCKER_PASS}

      - sh /tmp/paper-show/drone/deploy.sh
  when:
    event:
      - tag

build result:

[appleboy]

@lkqm Do you want to upload docker image to aliyuncs?

[lkqm]

No, I need pull docker image from aliyuncs private repository in remote ssh host, so I need password to login aliyuncs registry.
不是的，我需要在远程主机上从阿里云私有仓库拉去docker镜像, 所以我需要密码登录镜像中心

[lkqm]

@appleboy so sorry, I am try again, it's work now, may be is password wrong