Sync roles in pipeline

Call rolesyncer on new commits to production.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

.pipeline.yml

@@ -16,3 +16,18 @@ pipeline:
       - salt-call --local --retcode-passthrough state.show_highstate
       - bin/prepare_mock.py
       - salt-call --local --retcode-passthrough state.apply mock=True
+
+  sync_roles:
+    image: registry.opensuse.org/home/crameleon/libertacasa/containers/containerfile/libertacasa/rolesyncer:latest
+    secrets:
+      - source: rolesyncer_nbh
+        target: NB_HOST
+      - source: rolesyncer_nbt
+        target: NB_TOKEN
+    when:
+      branch: [production]
+      event: [push]
+      instance: woodpecker-orpheus.intranet.squirrelcube.com
+    commands:
+      #- rolesyncer
+      - bin/rolesyncer.py