Skip to content

Commit

Permalink
[Buildkite] Re-order pipeline to improve security (#598)
Browse files Browse the repository at this point in the history
  • Loading branch information
nightah committed Jan 31, 2020
1 parent 49e739d commit 275af90
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 27 deletions.
20 changes: 20 additions & 0 deletions .buildkite/deployment.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
steps:
- label: ":docker: Image Deployments"
command: ".buildkite/steps/deployimages.sh | buildkite-agent pipeline upload"
concurrency: 1
concurrency_group: "deployments"

- wait

- label: ":docker: Deploy Manifests"
command: "authelia-scripts docker push-manifest"
concurrency: 1
concurrency_group: "deployments"
env:
DOCKER_CLI_EXPERIMENTAL: "enabled"

- label: ":github: Deploy Artifacts"
command: ".buildkite/steps/ghartifacts.sh"
agents:
upload: "fast"
if: build.tag != null
28 changes: 1 addition & 27 deletions .buildkite/pipeline.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,30 +15,4 @@ steps:
- label: ":chrome: Integration Tests"
command: ".buildkite/steps/e2etests.sh | buildkite-agent pipeline upload"
depends_on:
- "build-docker-amd64"

- wait

- label: ":docker: Image Deployments"
command: ".buildkite/steps/deployimages.sh | buildkite-agent pipeline upload"
concurrency: 1
concurrency_group: "deployments"

- wait

- label: ":docker: Deploy Manifests"
command: "authelia-scripts docker push-manifest"
concurrency: 1
concurrency_group: "deployments"
env:
DOCKER_CLI_EXPERIMENTAL: "enabled"

- label: ":github: Deploy Artifacts"
command: ".buildkite/steps/ghartifacts.sh"
agents:
upload: "fast"
depends_on:
- "build-docker-amd64"
- "build-docker-arm32v7"
- "build-docker-arm64v8"
if: build.tag != null
- "build-docker-amd64"

0 comments on commit 275af90

Please sign in to comment.