.drone.yml

---
kind: pipeline
type: docker
name: build-amd64

platform:
  os: linux
  arch: amd64

steps:
- name: build-and-package
  image: rancher/dapper:v0.5.3
  commands:
  - docker pull --quiet rancher/hardened-build-base:v1.13.15b4
  - dapper -f Dockerfile --target dapper make dapper-ci
  volumes:
  - name: docker
    path: /var/run/docker.sock

- name: test
  image: rancher/dapper:v0.5.0
  secrets: [ gcloud_auth ]
  environment:
    GCLOUD_AUTH:
      from_secret: gcloud_auth
  commands:
  - dapper -f Dockerfile --target dapper make test
  volumes:
  - name: docker
    path: /var/run/docker.sock

- name: publish-dist-artifacts
  image: plugins/github-release
  settings:
    api_key:
      from_secret: github_token
    checksum:
    - sha256
    checksum_file: CHECKSUMsum-amd64.txt
    checksum_flatten: true
    files:
    - dist/artifacts/*
    prerelease: true
  when:
    event:
    - tag
    instance:
    - drone-publish.rancher.io
    ref:
    - refs/head/master
    - refs/tags/*

- name: publish-image-kubernetes
  image: rancher/hardened-build-base:v1.13.15b4
  commands:
  - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
  - DRONE_TAG=${DRONE_TAG} make publish-image-kubernetes
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - tag
    instance:
    - drone-publish.rancher.io
    ref:
    - refs/head/master
    - refs/tags/*

- name: publish-image-runtime
  image: rancher/hardened-build-base:v1.13.15b4
  commands:
  - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
  - DRONE_TAG=${DRONE_TAG} make publish-image-runtime
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - tag
    instance:
    - drone-publish.rancher.io
    ref:
    - refs/head/master
    - refs/tags/*

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

---
kind: pipeline
type: docker
name: check

platform:
  os: linux
  arch: amd64

steps:
- name: go-mod-tidy
  image: rancher/hardened-build-base:v1.13.15b4
  commands:
  - go mod tidy
  - git diff --exit-code
  volumes:
  - name: docker
    path: /var/run/docker.sock

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

---
kind: pipeline
type: docker
name: manifest

platform:
  os: linux
  arch: amd64

steps:
- name: manifest-runtime
  image: rancher/hardened-build-base:v1.13.15b4
  commands:
  - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
  - DRONE_TAG=${DRONE_TAG} make publish-manifest-runtime
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - tag
    instance:
    - drone-publish.rancher.io
    ref:
    - refs/head/master
    - refs/tags/*

- name: manifest-kubernetes
  image: rancher/hardened-build-base:v1.13.15b4
  commands:
  - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
  - DRONE_TAG=${DRONE_TAG} make publish-manifest-kubernetes
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - tag
    instance:
    - drone-publish.rancher.io
    ref:
    - refs/head/master
    - refs/tags/*

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

depends_on:
- build-amd64
- check

---
kind: pipeline
type: docker
name: dispatch

platform:
  os: linux
  arch: amd64

steps:
- name: dispatch
  image: rancher/dapper:v0.5.0
  commands:
  - dapper -f Dockerfile --target dapper make dispatch
  environment:
    PAT_TOKEN:
      from_secret: github_token
    PAT_USERNAME:
      from_secret: pat_username
  volumes:
  - name: docker
    path: /var/run/docker.sock
  when:
    event:
    - tag
    instance:
    - drone-publish.rancher.io
    ref:
    - refs/head/master
    - refs/tags/*

volumes:
- name: docker
  host:
    path: /var/run/docker.sock

depends_on:
- manifest

...