Revert "Use --password-stdin for upload-container-image"
This reverts commit 345c839db6
.
This is simpler, and we don't have to worry about the tempfile write
accidentally exposing secrets. This is similar to the way we log in
in the promote job.
Change-Id: I2a0f34e0ea3abe88fe9f26d12298baf68f1a6b2d
This commit is contained in:
parent
0c3b87f20e
commit
cc0c655e5f
@ -1,22 +1,6 @@
|
|||||||
- name: Create tempfile for password
|
|
||||||
tempfile:
|
|
||||||
state: file
|
|
||||||
register: _password_tmp
|
|
||||||
|
|
||||||
- name: Populate tempfile
|
|
||||||
copy:
|
|
||||||
content: "{{ container_registry_credentials[zj_image.registry].password }}"
|
|
||||||
dest: "{{ _password_tmp.path }}"
|
|
||||||
mode: 0600
|
|
||||||
|
|
||||||
- name: Log in to registry
|
- name: Log in to registry
|
||||||
block:
|
command: "{{ container_command }} login -u {{ container_registry_credentials[zj_image.registry].username }} -p {{ container_registry_credentials[zj_image.registry].password }} {{ zj_image.registry }}"
|
||||||
- name: Log in to registry
|
no_log: true
|
||||||
shell: "cat {{ _password_tmp.path }} | {{ container_command }} login -u {{ container_registry_credentials[zj_image.registry].username }} --password-stdin {{ zj_image.registry }}"
|
|
||||||
|
|
||||||
always:
|
|
||||||
- name: Remove password from disk
|
|
||||||
command: "shred {{ _password_tmp.path }}"
|
|
||||||
|
|
||||||
- name: Publish images
|
- name: Publish images
|
||||||
block:
|
block:
|
||||||
|
Loading…
Reference in New Issue
Block a user