Add convenience script to update drone-ci secrets

1 files changed, 27 insertions, 0 deletions

diff --git a/home/bin/drone-encsecrets b/home/bin/drone-encsecrets
new file mode 100755
index 0000000..b341094
--- /dev/null
+++ b/home/bin/drone-encsecrets
@@ -0,0 +1,27 @@
+#!/bin/bash
+
+# Update drone-ci secrets
+
+# Get the repository of the current git project.
+# The repository name is the username/project tuple of the origin remote.
+REPO=${REPO:-$(git remote show origin -n | grep "Fetch URL:" | sed -e 's,.*:\(.*\),\1,' -e 's/\.git$//')}
+
+SECRETS_FILE="$HOME/.drone/secrets/$REPO/secrets.yml"
+
+echo "Generating secret for repository: $REPO"
+echo "Using secrets from: $SECRETS_FILE"
+
+if [ ! -f "$SECRETS_FILE" ]; then
+    echo "Secrets file $SECRETS_FILE does not exist. Aborting.">&2
+    exit 1
+fi
+
+drone \
+    --server https://drone.jodersky.ch \
+    --token $(pass infra/drone-token) \
+    secure \
+    --repo "$REPO" \
+    -in "$SECRETS_FILE" \
+    -out .drone.sec \
+    --yaml .drone.yml \
+    --checksum