[Buildkite] Re-order pipeline to improve security (#598)

2020-01-31 15:16:46 +11:00 · 2020-01-31 15:16:46 +11:00 · 275af90137
parent 49e739d009
commit 275af90137
2 changed files with 21 additions and 27 deletions
--- a/.buildkite/deployment.yml
+++ b/.buildkite/deployment.yml
@ -0,0 +1,20 @@
+steps:
+  - label: ":docker: Image Deployments"
+    command: ".buildkite/steps/deployimages.sh | buildkite-agent pipeline upload"
+    concurrency: 1
+    concurrency_group: "deployments"
+
+  - wait
+
+  - label: ":docker: Deploy Manifests"
+    command: "authelia-scripts docker push-manifest"
+    concurrency: 1
+    concurrency_group: "deployments"
+    env:
+      DOCKER_CLI_EXPERIMENTAL: "enabled"
+
+  - label: ":github: Deploy Artifacts"
+    command: ".buildkite/steps/ghartifacts.sh"
+    agents:
+      upload: "fast"
+    if: build.tag != null
--- a/.buildkite/pipeline.yml
+++ b/.buildkite/pipeline.yml
@ -16,29 +16,3 @@ steps:
    command: ".buildkite/steps/e2etests.sh | buildkite-agent pipeline upload"
    depends_on:
      - "build-docker-amd64"
-
-  - wait
-
-  - label: ":docker: Image Deployments"
-    command: ".buildkite/steps/deployimages.sh | buildkite-agent pipeline upload"
-    concurrency: 1
-    concurrency_group: "deployments"
-
-  - wait
-
-  - label: ":docker: Deploy Manifests"
-    command: "authelia-scripts docker push-manifest"
-    concurrency: 1
-    concurrency_group: "deployments"
-    env:
-      DOCKER_CLI_EXPERIMENTAL: "enabled"
-
-  - label: ":github: Deploy Artifacts"
-    command: ".buildkite/steps/ghartifacts.sh"
-    agents:
-      upload: "fast"
-    depends_on:
-      - "build-docker-amd64"
-      - "build-docker-arm32v7"
-      - "build-docker-arm64v8"
-    if: build.tag != null