---
kind: pipeline
name: provisioning-tests

platform:
  os: linux
  arch: amd64

steps:
- name: provisioning-tests
  image: rancher/dapper:v0.5.4
  commands:
  - dapper provisioning-tests
  privileged: true
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - push
    - pull_request
    - tag

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
    exclude:
    - promote
---
kind: pipeline
name: default-linux-amd64

platform:
  os: linux
  arch: amd64

steps:
- name: build
  image: rancher/dapper:v0.5.4
  commands:
  - dapper ci
  privileged: true
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - push
    - pull_request
    - tag

- name: stage-binaries
  image: rancher/dapper:v0.5.4
  commands:
  - "cp -r ./bin/* ./package/"
  when:
    event:
    - push
    - tag

- name: docker-publish-head
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=amd64
    - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile
    tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-amd64
    password:
      from_secret: docker_password
    repo: rancher/rancher
    username:
      from_secret: docker_username
  when:
    ref:
      include:
      - "refs/heads/master"
      - "refs/heads/release/v*"
    event:
    - push

- name: docker-publish-head-agent
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=amd64
    - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
    - RANCHER_TAG=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-amd64
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile.agent
    tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-amd64
    password:
      from_secret: docker_password
    repo: rancher/rancher-agent
    username:
      from_secret: docker_username
  when:
    ref:
      include:
      - "refs/heads/master"
      - "refs/heads/release/v*"
    event:
    - push

- name: docker-publish-head-runtime
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=amd64
    - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile.runtime
    tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-amd64
    password:
      from_secret: docker_password
    repo: rancher/rancher-runtime
    username:
      from_secret: docker_username
  when:
    ref:
      include:
      - "refs/heads/master"
      - "refs/heads/release/v*"
    event:
    - push

- name: bin-publish
  image: plugins/gcs
  settings:
    acl:
    - allUsers:READER
    cache_control: "public,no-cache,proxy-revalidate"
    source: bin/rancherd
    target: releases.rancher.com/rancherd/${DRONE_BRANCH}/rancherd
    token:
      from_secret: google_auth_key
  when:
    ref:
      include:
      - "refs/heads/master"
      - "refs/heads/release/v*"
    event:
    - push


- name: docker-publish
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=amd64
    - "VERSION=${DRONE_TAG}"
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile
    password:
      from_secret: docker_password
    repo: rancher/rancher
    tag: "${DRONE_TAG}-linux-amd64"
    username:
      from_secret: docker_username
  when:
    event:
    - tag

- name: docker-publish-agent
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=amd64
    - "VERSION=${DRONE_TAG}"
    - "RANCHER_TAG=${DRONE_TAG}-linux-amd64"
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile.agent
    password:
      from_secret: docker_password
    repo: rancher/rancher-agent
    tag: "${DRONE_TAG}-linux-amd64"
    username:
      from_secret: docker_username
  when:
    event:
    - tag

- name: docker-publish-runtime
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=amd64
    - "VERSION=${DRONE_TAG}"
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile.runtime
    password:
      from_secret: docker_password
    repo: rancher/rancher-runtime
    tag: "${DRONE_TAG}-linux-amd64"
    username:
      from_secret: docker_username
  when:
    event:
    - tag

- name: github_binary_prerelease
  image: plugins/github-release
  settings:
    api_key:
      from_secret: github_token
    checksum:
    - sha256
    files:
    - "bin/rancher-*"
    - "bin/rancherd-*"
    prerelease: true
    title: "Pre-release ${DRONE_TAG}"
    note: ./bin/rancher-components.txt
  when:
    event:
    - tag
    ref:
      include:
      - "refs/tags/*rc*"
      - "refs/tags/*alpha*"

- name: github_binary_release
  image: plugins/github-release
  settings:
    api_key:
      from_secret: github_token
    checksum:
    - sha256
    files:
    - "bin/rancher-*"
    - "bin/rancherd-*"
  when:
    event:
    - tag
    ref:
      include:
      - "refs/tags/v2*"
      exclude:
      - "refs/tags/*rc*"
      - "refs/tags/*alpha*"

- name: slack_notify
  image: plugins/slack
  settings:
    template: "Build {{build.link}} failed to publish an image/artifact.\n"
    username: Drone_Publish
    webhook:
      from_secret: slack_webhook
  when:
    event:
      exclude:
      - pull_request
    instance:
    - drone-publish.rancher.io
    status:
    - failure

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
    exclude:
    - promote
---
kind: pipeline
name: default-linux-arm64

platform:
  os: linux
  arch: arm64

steps:
- name: build
  image: rancher/dapper:v0.5.4
  commands:
  - dapper ci
  privileged: true
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - push
    - pull_request
    - tag

- name: stage-binaries
  image: rancher/dapper:v0.5.4
  commands:
  - "cp -r ./bin/* ./package/"
  when:
    event:
    - push
    - tag

- name: docker-publish-head
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=arm64
    - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile
    tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-arm64
    password:
      from_secret: docker_password
    repo: rancher/rancher
    username:
      from_secret: docker_username
  when:
    ref:
      include:
      - "refs/heads/master"
      - "refs/heads/release/v*"
    event:
    - push

- name: docker-publish-head-agent
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=arm64
    - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
    - RANCHER_TAG=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-arm64
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile.agent
    tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-linux-arm64
    password:
      from_secret: docker_password
    repo: rancher/rancher-agent
    username:
      from_secret: docker_username
  when:
    ref:
      include:
      - "refs/heads/master"
      - "refs/heads/release/v*"
    event:
    - push

- name: docker-publish
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=arm64
    - "VERSION=${DRONE_TAG}"
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile
    password:
      from_secret: docker_password
    repo: rancher/rancher
    tag: "${DRONE_TAG}-linux-arm64"
    username:
      from_secret: docker_username
  when:
    event:
    - tag

- name: docker-publish-agent
  image: plugins/docker
  settings:
    purge: false
    build_args:
    - ARCH=arm64
    - "VERSION=${DRONE_TAG}"
    - "RANCHER_TAG=${DRONE_TAG}-linux-arm64"
    context: package/
    custom_dns: 1.1.1.1
    dockerfile: package/Dockerfile.agent
    password:
      from_secret: docker_password
    repo: rancher/rancher-agent
    tag: "${DRONE_TAG}-linux-arm64"
    username:
      from_secret: docker_username
  when:
    event:
    - tag

- name: slack_notify
  image: plugins/slack
  settings:
    template: "Build {{build.link}} failed to publish an image/artifact.\n"
    username: Drone_Publish
    webhook:
      from_secret: slack_webhook
  when:
    event:
      exclude:
      - pull_request
    instance:
    - drone-publish.rancher.io
    status:
    - failure

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
    exclude:
    - promote
---
kind: pipeline
name: default-windows-1809

platform:
  os: windows
  arch: amd64
  version: 1809

steps:
  - name: build
    pull: always
    image: rancher/dapper:v0.5.4
    commands:
      - dapper.exe -f Dockerfile-windows.dapper -d ci
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      event:
        - push
        - pull_request
        - tag

  - name: stage-binaries
    image: rancher/dapper:v0.5.4
    commands:
      - "cp -r ./bin/* ./package/windows/"
    when:
      event:
        - push
        - tag

  - name: docker-publish-head-agent
    image: plugins/docker:windows-1809-amd64
    settings:
      purge: false
      build_args:
        - SERVERCORE_VERSION=1809
        - ARCH=amd64
        - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
      context: package/windows
      custom_dns: 1.1.1.1
      dockerfile: package/windows/Dockerfile.agent
      password:
        from_secret: docker_password
      repo: rancher/rancher-agent
      tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-windows-1809
      username:
        from_secret: docker_username
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      ref:
        include:
        - "refs/heads/master"
        - "refs/heads/release/v*"
      event:
        - push

  - name: docker-publish-agent
    image: plugins/docker:windows-1809-amd64
    settings:
      purge: false
      build_args:
        - SERVERCORE_VERSION=1809
        - ARCH=amd64
        - "VERSION=${DRONE_TAG}"
      context: package/windows
      custom_dns: 1.1.1.1
      dockerfile: package/windows/Dockerfile.agent
      password:
        from_secret: docker_password
      repo: rancher/rancher-agent
      tag: "${DRONE_TAG}-windows-1809"
      username:
        from_secret: docker_username
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      event:
        - tag

  - name: slack_notify
    image: plugins/slack
    settings:
      template: "Build {{build.link}} failed to publish an image/artifact.\n"
      username: Drone_Publish
      webhook:
        from_secret: slack_webhook
    when:
      event:
        exclude:
          - pull_request
      instance:
        - drone-publish.rancher.io
      status:
        - failure

volumes:
  - name: docker_pipe
    host:
      path: \\\\.\\pipe\\docker_engine

trigger:
  event:
    exclude:
      - promote

---
kind: pipeline
name: default-windows-2004

platform:
  os: windows
  arch: amd64
  version: 2004

# remove this and use upstream images when https://github.com/drone/drone-git/pull/25 is merged
clone:
  disable: true

steps:
  - name: clone
    image: rancher/drone-images:git-2004
    settings:
      depth: 20
  - name: build
    pull: always
    image: rancher/dapper:v0.5.4
    commands:
      - dapper.exe -f Dockerfile-windows.dapper -d ci
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      event:
        - push
        - pull_request
        - tag

  - name: stage-binaries
    image: rancher/dapper:v0.5.4
    commands:
      - "cp -r ./bin/* ./package/windows/"
    when:
      event:
        - push
        - tag

  - name: docker-publish-head-agent
    image: rancher/drone-images:docker-2004
    settings:
      purge: false
      build_args:
        - SERVERCORE_VERSION=2004
        - ARCH=amd64
        - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
      context: package/windows
      custom_dns: 1.1.1.1
      dockerfile: package/windows/Dockerfile.agent
      password:
        from_secret: docker_password
      repo: rancher/rancher-agent
      tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-windows-2004
      username:
        from_secret: docker_username
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      ref:
        include:
          - "refs/heads/master"
          - "refs/heads/release/v*"
      event:
        - push

  - name: docker-publish-agent
    image: rancher/drone-images:docker-2004
    settings:
      purge: false
      build_args:
        - SERVERCORE_VERSION=2004
        - ARCH=amd64
        - "VERSION=${DRONE_TAG}"
      context: package/windows
      custom_dns: 1.1.1.1
      dockerfile: package/windows/Dockerfile.agent
      password:
        from_secret: docker_password
      repo: rancher/rancher-agent
      tag: "${DRONE_TAG}-windows-2004"
      username:
        from_secret: docker_username
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      event:
        - tag

  - name: slack_notify
    image: plugins/slack
    settings:
      template: "Build {{build.link}} failed to publish an image/artifact.\n"
      username: Drone_Publish
      webhook:
        from_secret: slack_webhook
    when:
      event:
        exclude:
          - pull_request
      instance:
        - drone-publish.rancher.io
      status:
        - failure

volumes:
  - name: docker_pipe
    host:
      path: \\\\.\\pipe\\docker_engine

trigger:
  event:
    exclude:
      - promote
---
kind: pipeline
name: default-windows-20H2

platform:
  os: windows
  arch: amd64
  version: 20H2

# remove this and use upstream images when https://github.com/drone/drone-git/pull/25 is merged
clone:
  disable: true

steps:
  - name: clone
    image: rancher/drone-images:git-20H2
    settings:
      depth: 20
  - name: build
    pull: always
    image: rancher/dapper:v0.5.4
    commands:
      - dapper.exe -f Dockerfile-windows.dapper -d ci
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      event:
        - push
        - pull_request
        - tag

  - name: stage-binaries
    image: rancher/dapper:v0.5.4
    commands:
      - "cp -r ./bin/* ./package/windows/"
    when:
      event:
        - push
        - tag

  - name: docker-publish-head-agent
    image: rancher/drone-images:docker-20H2
    settings:
      purge: false
      build_args:
        - SERVERCORE_VERSION=20H2
        - ARCH=amd64
        - VERSION=${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-head
      context: package/windows
      custom_dns: 1.1.1.1
      dockerfile: package/windows/Dockerfile.agent.20H2
      password:
        from_secret: docker_password
      repo: rancher/rancher-agent
      tag: ${DRONE_BRANCH/release\//}-${DRONE_COMMIT}-windows-20H2
      username:
        from_secret: docker_username
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      ref:
        include:
          - "refs/heads/master"
          - "refs/heads/release/v*"
      event:
        - push

  - name: docker-publish-agent
    image: rancher/drone-images:docker-20H2
    settings:
      purge: false
      build_args:
        - SERVERCORE_VERSION=20H2
        - ARCH=amd64
        - "VERSION=${DRONE_TAG}"
      context: package/windows
      custom_dns: 1.1.1.1
      dockerfile: package/windows/Dockerfile.agent
      password:
        from_secret: docker_password
      repo: rancher/rancher-agent
      tag: "${DRONE_TAG}-windows-20H2"
      username:
        from_secret: docker_username
    volumes:
      - name: docker_pipe
        path: \\\\.\\pipe\\docker_engine
    when:
      event:
        - tag

  - name: slack_notify
    image: plugins/slack
    settings:
      template: "Build {{build.link}} failed to publish an image/artifact.\n"
      username: Drone_Publish
      webhook:
        from_secret: slack_webhook
    when:
      event:
        exclude:
          - pull_request
      instance:
        - drone-publish.rancher.io
      status:
        - failure

volumes:
  - name: docker_pipe
    host:
      path: \\\\.\\pipe\\docker_engine

trigger:
  event:
    exclude:
      - promote


---

kind: pipeline
name: manifest

steps:
- name: push-runtime-manifest
  image: plugins/manifest
  settings:
    username:
      from_secret: docker_username
    password:
      from_secret: docker_password
    spec: manifest-runtime.tmpl
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - push
    - tag

- name: push-agent-manifest
  image: plugins/manifest
  settings:
    username:
      from_secret: docker_username
    password:
      from_secret: docker_password
    spec: manifest-agent.tmpl
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - push
    - tag

- name: push-agent-manifest-head
  image: plugins/manifest
  settings:
    username:
      from_secret: docker_username
    password:
      from_secret: docker_password
    spec: manifest-agent-head.tmpl
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - push

- name: push-manifest-head
  image: plugins/manifest
  settings:
    username:
      from_secret: docker_username
    password:
      from_secret: docker_password
    spec: manifest-head.tmpl
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - push

- name: push-manifest
  image: plugins/manifest
  settings:
    username:
      from_secret: docker_username
    password:
      from_secret: docker_password
    spec: manifest.tmpl
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - push
    - tag

- name: build-chart
  image: rancher/dapper:v0.5.4
  commands:
  - dapper chart/ci
  privileged: true
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - push
    - tag

- name: chart-publish
  image: plugins/gcs
  settings:
    acl:
    - allUsers:READER
    cache_control: "public,no-cache,proxy-revalidate"
    source: bin/chart
    target: releases.rancher.com/server-charts
    token:
      from_secret: google_auth_key
  when:
    event:
    - tag

- name: slack_notify
  image: plugins/slack
  settings:
    template: "Build {{build.link}} failed to push manifests.\n"
    username: Drone_Publish
    webhook:
      from_secret: slack_webhook
  when:
    event:
      exclude:
      - pull_request
    instance:
      include:
      - drone-publish.rancher.io
    status:
      - failure

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
    exclude:
    - promote

depends_on:
- default-linux-amd64
- default-linux-arm64
- default-windows-1809
- default-windows-2004
- default-windows-20H2
---
kind: pipeline
name: docker-image-digests-linux-amd64

platform:
  os: linux
  arch: amd64

steps:
- name: docker-image-digests
  image: rancher/drone-docker-image-digests:v0.0.11
  environment:
    PLUGIN_GITHUB_REPOSITORY: "rancher/rancher"
    PLUGIN_GITHUB_TOKEN:
      from_secret: github_token
    PLUGIN_GITHUB_TAG: "${DRONE_TAG}"
    PLUGIN_INPUT_FILE: "rancher-images.txt"
    PLUGIN_OUTPUT_FILE: "rancher-images-digests-linux-amd64.txt"
    PLUGIN_REGISTRY: "docker.io"
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - tag

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
    exclude:
    - promote

depends_on:
- default-linux-amd64
---
kind: pipeline
name: docker-image-digests-linux-arm64

platform:
  os: linux
  arch: arm64

steps:
- name: docker-image-digests
  image: rancher/drone-docker-image-digests:v0.0.11
  environment:
    PLUGIN_GITHUB_REPOSITORY: "rancher/rancher"
    PLUGIN_GITHUB_TOKEN:
      from_secret: github_token
    PLUGIN_GITHUB_TAG: "${DRONE_TAG}"
    PLUGIN_INPUT_FILE: "rancher-images.txt"
    PLUGIN_OUTPUT_FILE: "rancher-images-digests-linux-arm64.txt"
    PLUGIN_REGISTRY: "docker.io"
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - tag

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
    exclude:
    - promote

depends_on:
- default-linux-amd64
- default-linux-arm64
---
kind: pipeline
name: docker-image-digests-windows-1809

platform:
  os: windows
  arch: amd64
  version: 1809

steps:
- name: docker-image-digests
  image: rancher/drone-docker-image-digests:v0.0.11
  environment:
    PLUGIN_GITHUB_REPOSITORY: "rancher/rancher"
    PLUGIN_GITHUB_TOKEN:
      from_secret: github_token
    PLUGIN_GITHUB_TAG: "${DRONE_TAG}"
    PLUGIN_INPUT_FILE: "rancher-windows-images.txt"
    PLUGIN_OUTPUT_FILE: "rancher-images-digests-windows-1809.txt"
    PLUGIN_REGISTRY: "docker.io"
  volumes:
    - name: docker_pipe
      path: \\\\.\\pipe\\docker_engine
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - tag

volumes:
  - name: docker_pipe
    host:
      path: \\\\.\\pipe\\docker_engine

trigger:
  event:
    exclude:
    - promote

depends_on:
- default-linux-amd64
- default-windows-1809

---
kind: pipeline
name: docker-image-digests-windows-2004

platform:
  os: windows
  arch: amd64
  version: 2004

# remove this and use upstream images when https://github.com/drone/drone-git/pull/25 is merged
clone:
  disable: true

steps:
- name: clone
  image: luthermonson/drone-git:windows-2004-amd64
  settings:
    depth: 20

- name: docker-image-digests
  image: rancher/drone-docker-image-digests:v0.0.11
  environment:
    PLUGIN_GITHUB_REPOSITORY: "rancher/rancher"
    PLUGIN_GITHUB_TOKEN:
      from_secret: github_token
    PLUGIN_GITHUB_TAG: "${DRONE_TAG}"
    PLUGIN_INPUT_FILE: "rancher-windows-images.txt"
    PLUGIN_OUTPUT_FILE: "rancher-images-digests-windows-2004.txt"
    PLUGIN_REGISTRY: "docker.io"
  volumes:
    - name: docker_pipe
      path: \\\\.\\pipe\\docker_engine
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - tag

volumes:
  - name: docker_pipe
    host:
      path: \\\\.\\pipe\\docker_engine

trigger:
  event:
    exclude:
    - promote

depends_on:
- default-linux-amd64
- default-windows-2004
---
kind: pipeline
name: docker-image-digests-windows-20H2

platform:
  os: windows
  arch: amd64
  version: 20H2

# remove this and use upstream images when https://github.com/drone/drone-git/pull/25 is merged
clone:
  disable: true

steps:
- name: clone
  image: luthermonson/drone-git:windows-20H2-amd64
  settings:
    depth: 1

- name: docker-image-digests
  image: rancher/drone-docker-image-digests:v0.0.11
  environment:
    PLUGIN_GITHUB_REPOSITORY: "rancher/rancher"
    PLUGIN_GITHUB_TOKEN:
      from_secret: github_token
    PLUGIN_GITHUB_TAG: "${DRONE_TAG}"
    PLUGIN_INPUT_FILE: "rancher-windows-images.txt"
    PLUGIN_OUTPUT_FILE: "rancher-images-digests-windows-20H2.txt"
    PLUGIN_REGISTRY: "docker.io"
  volumes:
    - name: docker_pipe
      path: \\\\.\\pipe\\docker_engine
  when:
    instance:
      include:
      - drone-publish.rancher.io
    event:
    - tag

volumes:
  - name: docker_pipe
    host:
      path: \\\\.\\pipe\\docker_engine

trigger:
  event:
    exclude:
    - promote

depends_on:
- default-linux-amd64
- default-windows-20H2
---
kind: pipeline
name: publish

platform:
  os: linux
  arch: amd64

steps:
- name: chart-promote
  image: rancher/dapper:v0.5.4
  commands:
  - dapper chart/copy
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - promote
    target:
    - promote-stable

- name: chart-publish
  image: plugins/gcs
  settings:
    acl:
    - allUsers:READER
    cache_control: "public,no-cache,proxy-revalidate"
    source: bin/chart
    target: releases.rancher.com/server-charts
    token:
      from_secret: google_auth_key
  when:
    event:
    - promote
    target:
    - promote-stable

- name: slack_notify
  image: plugins/slack
  settings:
    template: "Build {{build.link}} failed to promote chart.\n"
    username: Drone_Publish
    webhook:
      from_secret: slack_webhook
  when:
    event:
    - promote
    target:
    - promote-stable
    instance:
      - drone-publish.rancher.io
    status:
      - failure

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
  - promote
---
kind: pipeline
name: promote-docker-image

platform:
  os: linux
  arch: amd64

steps:
- name: docker-image-promote
  image: quay.io/skopeo/stable:v1.1.1
  commands:
  - echo $${DOCKER_PASSWORD} | skopeo login docker.io --username $${DOCKER_USERNAME} --password-stdin
  - skopeo copy docker://rancher/rancher:$${SOURCE_TAG} docker://rancher/rancher:$${DESTINATION_TAG} --all
  settings:
    custom_dns: 1.1.1.1
  volumes:
  - name: docker
    path: /var/run/docker.sock
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username
  when:
    event:
    - promote
    target:
    - promote-docker-image

- name: slack_notify
  image: plugins/slack
  settings:
    template: "Build {{build.link}} failed to push Docker image.\n"
    username: Drone_Publish
    webhook:
      from_secret: slack_webhook
  when:
    event:
    - promote
    target:
    - promote-docker-image
    instance:
      - drone-publish.rancher.io
    status:
      - failure

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

trigger:
  event:
  - promote
...