This extension provides global secrets for use in your pipelines. This extension is a direct port of the global secret file in Drone 0.8. Please note this project requires Drone server version 1.4 or higher.

Secret File

Secrets are loaded from a yaml configuration file. Example secrets configuration file:

- name: docker_username
  value: octocat

- name: docker_password
  value: correct-horse-battery-staple
  repos: [ octocat/hello-world, github/* ]
  events: [ push, tag ]

Installation

Create a shared secret:

$ openssl rand -hex 16
bea26a2221fd8090ea38720fc445eca6

Download and run the plugin:

$ docker run -d \
  --publish=3000:3000 \
  --env=DRONE_DEBUG=true \
  --env=DRONE_SECRET=bea26a2221fd8090ea38720fc445eca6 \
  --env=DRONE_SECRET_FILE=/etc/secrets.yml \
  --restart=always \
  --volume=/etc/secrets.yml:/etc/secrets.yml \
  --name=secrets drone/secret-plugin

Update your Drone runner configuration to include the extension address and the shared secret.

DRONE_SECRET_PLUGIN_ENDPOINT=http://1.2.3.4:3000
DRONE_SECRET_PLUGIN_SECRET=bea26a2221fd8090ea38720fc445eca6