diff --git a/.drone.yml b/.drone.yml index 0aee6bfae6f..bcdfccc5798 100644 --- a/.drone.yml +++ b/.drone.yml @@ -3948,6 +3948,12 @@ get: kind: secret name: azure_tenant --- +get: + name: token + path: infra/data/ci/grafana-release-eng/npm +kind: secret +name: npm_token +--- get: name: public-key-b64 path: infra/data/ci/packages-publish/gpg @@ -4063,6 +4069,6 @@ kind: secret name: github_token --- kind: signature -hmac: 78bd233b91e20ae4ef7ea1b2f4ef32a7995fac3603c42fef7268ad07513c59f8 +hmac: fff3d5d91e4e04599392c2b8d218f033b8cc71516f1d709d3dea44f365e0ddef ... diff --git a/scripts/drone/events/release.star b/scripts/drone/events/release.star index 1325de21536..c0a03d3d4e5 100644 --- a/scripts/drone/events/release.star +++ b/scripts/drone/events/release.star @@ -53,6 +53,7 @@ load( "scripts/drone/vault.star", "from_secret", "gcp_upload_artifacts_key", + "npm_token", "prerelease_bucket", ) load( @@ -122,7 +123,7 @@ def release_npm_packages_step(): ], "failure": "ignore", "environment": { - "NPM_TOKEN": from_secret("npm_token"), + "NPM_TOKEN": from_secret(npm_token), }, "commands": ["./bin/build artifacts npm release --tag ${DRONE_TAG}"], } diff --git a/scripts/drone/steps/lib.star b/scripts/drone/steps/lib.star index 1bf7b8bb2e3..17338b3dea5 100644 --- a/scripts/drone/steps/lib.star +++ b/scripts/drone/steps/lib.star @@ -8,6 +8,7 @@ load( "gcp_grafanauploads", "gcp_grafanauploads_base64", "gcp_upload_artifacts_key", + "npm_token", "prerelease_bucket", ) load( @@ -1078,7 +1079,7 @@ def release_canary_npm_packages_step(trigger = None): "image": images["build_image"], "depends_on": end_to_end_tests_deps(), "environment": { - "NPM_TOKEN": from_secret("npm_token"), + "NPM_TOKEN": from_secret(npm_token), }, "commands": [ "./scripts/circle-release-canary-packages.sh", diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star index 9539d804df9..929fe8ffa46 100644 --- a/scripts/drone/vault.star +++ b/scripts/drone/vault.star @@ -17,6 +17,8 @@ rgm_destination = "destination" rgm_github_token = "github_token" rgm_dagger_token = "dagger_token" +npm_token = "npm_token" + def from_secret(secret): return {"from_secret": secret} @@ -64,6 +66,11 @@ def secrets(): "infra/data/ci/datasources/cpp-azure-resourcemanager-credentials", "tenant_id", ), + vault_secret( + npm_token, + "infra/data/ci/grafana-release-eng/npm", + "token", + ), # Package publishing vault_secret( "packages_gpg_public_key",