diff --git a/.drone.yml b/.drone.yml index 74606dbee6a..dbf949d935a 100644 --- a/.drone.yml +++ b/.drone.yml @@ -4469,6 +4469,8 @@ steps: - export GRAFANA_DIR=$$(pwd) - cd rgm && ./scripts/drone_publish_main.sh environment: + _EXPERIMENTAL_DAGGER_CLOUD_TOKEN: + from_secret: dagger_token DESTINATION: from_secret: destination GCP_KEY_BASE64: @@ -4515,6 +4517,8 @@ steps: - export GRAFANA_DIR=$$(pwd) - cd rgm && ./scripts/drone_publish_tag.sh environment: + _EXPERIMENTAL_DAGGER_CLOUD_TOKEN: + from_secret: dagger_token DESTINATION: from_secret: destination GCP_KEY_BASE64: @@ -7073,6 +7077,12 @@ get: kind: secret name: destination --- +get: + name: dagger_token + path: infra/data/ci/grafana-release-eng/rgm +kind: secret +name: dagger_token +--- get: name: pat path: infra/data/ci/github/grafanabot @@ -7098,6 +7108,6 @@ kind: secret name: delivery-bot-app-private-key --- kind: signature -hmac: 918dbda2a3a3b0b0c8469778e0f99116e917531a622622739405bbb147a9fb34 +hmac: 168c9251dad68602a8163238cee8d7a58471e518aaedbd6262ae60a72261a34d ... diff --git a/scripts/drone/rgm.star b/scripts/drone/rgm.star index 11e48274927..e4323a43f10 100644 --- a/scripts/drone/rgm.star +++ b/scripts/drone/rgm.star @@ -11,6 +11,7 @@ load( load( "scripts/drone/vault.star", "from_secret", + "rgm_dagger_token", "rgm_destination", "rgm_gcp_key_base64", "rgm_github_token", @@ -20,6 +21,7 @@ rgm_env_secrets = { "GCP_KEY_BASE64": from_secret(rgm_gcp_key_base64), "DESTINATION": from_secret(rgm_destination), "GITHUB_TOKEN": from_secret(rgm_github_token), + "_EXPERIMENTAL_DAGGER_CLOUD_TOKEN": from_secret(rgm_dagger_token), } def rgm_build(script = "drone_publish_main.sh"): diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star index 59877d83b0b..cbddf044f3f 100644 --- a/scripts/drone/vault.star +++ b/scripts/drone/vault.star @@ -12,6 +12,7 @@ azure_tenant = "azure_tenant" rgm_gcp_key_base64 = "gcp_key_base64" rgm_destination = "destination" rgm_github_token = "github_token" +rgm_dagger_token = "dagger_token" def from_secret(secret): return {"from_secret": secret} @@ -133,6 +134,11 @@ def secrets(): "infra/data/ci/grafana-release-eng/rgm", "destination", ), + vault_secret( + rgm_dagger_token, + "infra/data/ci/grafana-release-eng/rgm", + "dagger_token", + ), vault_secret( rgm_github_token, "infra/data/ci/github/grafanabot",