salt/.pipeline.yml

skip_clone: true

pipeline:
  lint:
    image: registry.opensuse.org/home/crameleon/libertacasa/containers/containerfile/libertacasa/pipeline-lint:latest
    secrets: [ci_netrc_username, ci_netrc_password, ci_netrc_machine]
    when:
      event: [push]
    commands:
      - git clone --single-branch -b $CI_COMMIT_BRANCH $CI_REPO_LINK ../salt-libertacasa-linting
      - cd ../salt-libertacasa-linting
      - find . -type f \( -name '*.yaml' -o -name '*.yml' \) -exec yamllint -f colored -s {} +
      - find . -name '*.sls' -exec salt-lint --severity {} +

  check:
    image: registry.opensuse.org/home/crameleon/libertacasa/containers/containerfile/libertacasa/pipeline:latest
    secrets: [ ci_netrc_username, ci_netrc_password, ci_netrc_machine ]
    when:
      event: [push]
    commands:
      - git clone --single-branch -b $CI_COMMIT_BRANCH $CI_REPO_LINK .
      - bin/clone_formulas.sh 2>/dev/null
      - bin/nbroles_to_grains.sh
      - bin/prepare_minion.py
      - cat /etc/salt/grains
      - salt-call --local --retcode-passthrough state.show_top
      - salt-call --local --retcode-passthrough state.show_highstate
      - bin/prepare_mock.py
      - salt-call --local --retcode-passthrough state.apply mock=True

  sync_roles:
    image: registry.opensuse.org/home/crameleon/libertacasa/containers/containerfile/libertacasa/rolesyncer:latest
    secrets:
      - source: rolesyncer_nbh
        target: NB_HOST
      - source: rolesyncer_nbt
        target: NB_TOKEN
    when:
      branch: [production]
      event: [push]
      instance: woodpecker-orpheus.intranet.squirrelcube.com
    commands:
      #- rolesyncer
      - bin/rolesyncer.py