From 874e3c190dcfd5a02789d1ecadc9444a6d8ebfc6 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Date: Sun, 22 Jan 2023 01:52:20 +0100
Subject: [PATCH] Sync roles in pipeline

Call rolesyncer on new commits to production.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 .pipeline.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.pipeline.yml b/.pipeline.yml
index 6bb0be7..9450491 100644
--- a/.pipeline.yml
+++ b/.pipeline.yml
@@ -16,3 +16,18 @@ pipeline:
       - salt-call --local --retcode-passthrough state.show_highstate
       - bin/prepare_mock.py
       - salt-call --local --retcode-passthrough state.apply mock=True
+
+  sync_roles:
+    image: registry.opensuse.org/home/crameleon/libertacasa/containers/containerfile/libertacasa/rolesyncer:latest
+    secrets:
+      - source: rolesyncer_nbh
+        target: NB_HOST
+      - source: rolesyncer_nbt
+        target: NB_TOKEN
+    when:
+      branch: [production]
+      event: [push]
+      instance: woodpecker-orpheus.intranet.squirrelcube.com
+    commands:
+      #- rolesyncer
+      - bin/rolesyncer.py