.drone.yml

---
kind: pipeline
type: docker
name: build-amd64

platform:
  os: linux
  arch: amd64

steps:
  - name: skipfiles
    image: plugins/git
    commands:
      - export NAME=$(test $DRONE_BUILD_EVENT = pull_request && echo remotes/origin/${DRONE_COMMIT_BRANCH:-master} || echo ${DRONE_COMMIT_SHA}~)
      - export DIFF=$(git --no-pager diff --name-only $NAME | grep -v -f .droneignore);
      - if [ -z "$DIFF" ]; then
            echo "All files in PR are on ignore list";
            exit 78;
        else
            echo "Some files in PR are not ignored, $DIFF";
        fi;
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**

  - name: validate-release
    image: rancher/dapper:v0.5.5
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - dapper -f Dockerfile --target dapper make validate-release
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io

  - name: build
    image: rancher/dapper:v0.5.5
    environment:
      ENABLE_REGISTRY: 'true'
      AWS_ACCESS_KEY_ID:
        from_secret: AWS_ACCESS_KEY_ID-rke2-ci-uploader
      AWS_SECRET_ACCESS_KEY:
        from_secret: AWS_SECRET_ACCESS_KEY-rke2-ci-uploader     
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - docker pull --quiet alpine:3.17
      - dapper -f Dockerfile --target dapper make dapper-ci
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**
          - refs/tags/*

  - name: fossa
    image: rancher/drone-fossa:latest
    failure: ignore
    settings:
      api_key:
        from_secret: FOSSA_API_KEY
    when:
      instance:
        - drone-publish.rancher.io
      ref:
        include:
          - "refs/heads/master"
          - "refs/heads/release-*"
          - "refs/tags/v*"
          - "refs/pull/*"
      event:
        - push
        - tag

  - name: package-images
    image: rancher/dapper:v0.5.5
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - dapper -f Dockerfile --target dapper make package-images
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io

  - name: scan
    image: rancher/dapper:v0.5.5
    failure: ignore
    commands:
      - dapper -f Dockerfile --target dapper make scan-images
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      instance:
        - drone-publish.rancher.io
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/tags/*

  - name: test
    image: rancher/dapper:v0.5.5
    secrets: [ AWS_ACCESS_KEY_ID-rke2-ci-uploader, AWS_SECRET_ACCESS_KEY-rke2-ci-uploader ]
    environment:
      ENABLE_REGISTRY: 'true'
      AWS_ACCESS_KEY_ID:
        from_secret: AWS_ACCESS_KEY_ID-rke2-ci-uploader
      AWS_SECRET_ACCESS_KEY:
        from_secret: AWS_SECRET_ACCESS_KEY-rke2-ci-uploader  
    commands:
      - dapper -f Dockerfile --target dapper make test
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**
          - refs/tags/*

  - name: publish-image-runtime
    image: rancher/hardened-build-base:v1.20.4b11
    commands:
      - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
      - DRONE_TAG=${DRONE_TAG} make publish-image-runtime
    environment:
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*

  - name: package-windows-images
    image: rancher/dapper:v0.5.5
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - dapper -f Dockerfile --target dapper make package-windows-images
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
    volumes:
      - name: docker
        path: /var/run/docker.sock

  - name: publish-dist-artifacts
    image: plugins/github-release
    settings:
      api_key:
        from_secret: github_token
      checksum:
        - sha256
      checksum_file: CHECKSUMsum-amd64.txt
      checksum_flatten: true
      files:
        - dist/artifacts/*
      prerelease: true
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*

volumes:
  - name: docker
    host:
      path: /var/run/docker.sock

---
kind: pipeline
type: docker
name: build-arm64

platform:
  os: linux
  arch: arm64

steps:
  - name: skipfiles
    image: plugins/git
    commands:
      - export NAME=$(test $DRONE_BUILD_EVENT = pull_request && echo remotes/origin/${DRONE_COMMIT_BRANCH:-master} || echo ${DRONE_COMMIT_SHA}~)
      - export DIFF=$(git --no-pager diff --name-only $NAME | grep -v -f .droneignore);
      - if [ -z "$DIFF" ]; then
            echo "All files in PR are on ignore list";
            exit 78;
        else
            echo "Some files in PR are not ignored, $DIFF";
        fi;
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**

  - name: validate-release
    image: rancher/dapper:v0.5.5
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - dapper -f Dockerfile --target dapper make validate-release
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io

  - name: build
    image: rancher/dapper:v0.5.5
    environment:
      ENABLE_REGISTRY: 'true'
      AWS_ACCESS_KEY_ID:
        from_secret: AWS_ACCESS_KEY_ID-rke2-ci-uploader
      AWS_SECRET_ACCESS_KEY:
        from_secret: AWS_SECRET_ACCESS_KEY-rke2-ci-uploader     
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - docker pull --quiet alpine:3.17
      - dapper -f Dockerfile --target dapper make dapper-ci
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**
          - refs/tags/*

  - name: fossa
    image: rancher/drone-fossa:latest
    failure: ignore
    settings:
      api_key:
        from_secret: FOSSA_API_KEY
    when:
      instance:
        - drone-publish.rancher.io
      ref:
        include:
          - "refs/heads/master"
          - "refs/heads/release-*"
          - "refs/tags/v*"
          - "refs/pull/*"
      event:
        - push
        - tag

  - name: package-images
    image: rancher/dapper:v0.5.5
    commands:
      - docker pull --quiet rancher/hardened-build-base:v1.20.4b11
      - dapper -f Dockerfile --target dapper make package-images
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io

  - name: scan
    image: rancher/dapper:v0.5.5
    failure: ignore
    commands:
      - dapper -f Dockerfile --target dapper make scan-images
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      instance:
        - drone-publish.rancher.io
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/tags/*

  - name: publish-image-runtime
    image: rancher/hardened-build-base:v1.20.4b11
    commands:
      - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
      - DRONE_TAG=${DRONE_TAG} make publish-image-runtime
    environment:
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*

  - name: publish-dist-artifacts
    image: plugins/github-release
    settings:
      api_key:
        from_secret: github_token
      checksum:
        - sha256
      checksum_file: CHECKSUMsum-arm64.txt
      checksum_flatten: true
      files:
        - dist/artifacts/*
      prerelease: true
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*

volumes:
  - name: docker
    host:
      path: /var/run/docker.sock
---
kind: pipeline
type: docker
name: build-s390x

platform:
  os: linux
  arch: amd64

node:
  arch: s390x

steps:
  - name: skipfiles
    image: alpine/git:v2.30.2-s390x
    commands:
      - export NAME=$(test $DRONE_BUILD_EVENT = pull_request && echo remotes/origin/${DRONE_COMMIT_BRANCH:-master} || echo ${DRONE_COMMIT_SHA}~)
      - export DIFF=$(git --no-pager diff --name-only $NAME | grep -v -f .droneignore);
      - if [ -z "$DIFF" ]; then
            echo "All files in PR are on ignore list";
            exit 78;
        else
            echo "Some files in PR are not ignored, $DIFF";
        fi;
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**

  - name: build
    image: rancher/dapper:v0.5.8
    commands:
      - dapper -f Dockerfile --target dapper make dapper-ci
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**
          - refs/tags/*

  - name: package-images
    image: rancher/dapper:v0.5.8
    commands:
      - dapper -f Dockerfile --target dapper make package-images
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io

  - name: publish-image-runtime
    image: rancher/hardened-build-base:v1.20.4b11
    commands:
      - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
      - DRONE_TAG=${DRONE_TAG} make publish-image-runtime
    environment:
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*

  - name: publish-dist-artifacts
    image: rancher/drone-images:github-release-s390x
    settings:
      api_key:
        from_secret: github_token
      checksum:
        - sha256
      checksum_file: CHECKSUMsum-s390x.txt
      checksum_flatten: true
      files:
        - dist/artifacts/*
      prerelease: true
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*
volumes:
  - name: docker
    host:
      path: /var/run/docker.sock

---
kind: pipeline
type: docker
name: dispatch

platform:
  os: linux
  arch: amd64

steps:
  - name: skipfiles
    image: plugins/git
    commands:
      - export NAME=$(test $DRONE_BUILD_EVENT = pull_request && echo remotes/origin/${DRONE_COMMIT_BRANCH:-master} || echo ${DRONE_COMMIT_SHA}~)
      - export DIFF=$(git --no-pager diff --name-only $NAME | grep -v -f .droneignore);
      - if [ -z "$DIFF" ]; then
            echo "All files in PR are on ignore list";
            exit 78;
        else
            echo "Some files in PR are not ignored, $DIFF";
        fi;
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**

  - name: dispatch
    image: rancher/dapper:v0.5.5
    commands:
      - dapper -f Dockerfile --target dapper make dispatch
    environment:
      PAT_TOKEN:
        from_secret: github_token
      PAT_USERNAME:
        from_secret: pat_username
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*

volumes:
  - name: docker
    host:
      path: /var/run/docker.sock

depends_on:
  - build-amd64
  - build-arm64
  - build-s390x
---
kind: pipeline
type: docker
name: manifest

platform:
  os: linux
  arch: amd64

steps:
  - name: skipfiles
    image: plugins/git
    commands:
      - export NAME=$(test $DRONE_BUILD_EVENT = pull_request && echo remotes/origin/${DRONE_COMMIT_BRANCH:-master} || echo ${DRONE_COMMIT_SHA}~)
      - export DIFF=$(git --no-pager diff --name-only $NAME | grep -v -f .droneignore);
      - if [ -z "$DIFF" ]; then
            echo "All files in PR are on ignore list";
            exit 78;
        else
            echo "Some files in PR are not ignored, $DIFF";
        fi;
    when:
      ref:
        include:
          - refs/heads/master
          - refs/heads/release-*
          - refs/pull/**

  - name: push-runtime-manifest
    image: plugins/manifest
    settings:
      username:
        from_secret: docker_username
      password:
        from_secret: docker_password
      spec: manifest-runtime.tmpl
    when:
      event:
        - tag
      instance:
        - drone-publish.rancher.io
      ref:
        - refs/head/master
        - refs/tags/*
depends_on:
  - build-amd64
  - build-arm64
  - build-s390x
...