init

tasks/docker-registry/task.yaml

@@ -65,10 +65,12 @@ spec:
         }
         EOF
 
-        # PyPI 인증 정보 환경 변수 파일 생성
+        # PyPI 인증 정보 변수 정의
         echo "🔐 Setting PyPI auth env..."
-        echo "PYPI_USERNAME=$(cat /workspace/pypi-auth/username)" > /tekton/home/pypi-auth.env
+        PYPI_USERNAME=$(cat /workspace/pypi-auth/username)
-        echo "PYPI_PASSWORD=$(cat /workspace/pypi-auth/password)" >> /tekton/home/pypi-auth.env
+        PYPI_PASSWORD=$(cat /workspace/pypi-auth/password)
+        echo "export PYPI_USERNAME=$PYPI_USERNAME" > /tekton/home/pypi-auth.env
+        echo "export PYPI_PASSWORD=$PYPI_PASSWORD" >> /tekton/home/pypi-auth.env
 
     # 🏗️ Kaniko 공식 이미지 실행
     - name: kaniko-build
@@ -77,20 +79,24 @@ spec:
       env:
         - name: DOCKER_CONFIG
           value: /tekton/home/.docker
-      script: |
+        - name: PYPI_USERNAME
-        #!/bin/sh
+          valueFrom:
-        set -e
+            configMapKeyRef:
-
+              name: pypi-auth-config
-        # PyPI 인증 정보 로드
+              key: username
-        source /tekton/home/pypi-auth.env
+              optional: true
-
+        - name: PYPI_PASSWORD
-        # Kaniko 빌드 실행
+          valueFrom:
-        /kaniko/executor \
+            configMapKeyRef:
-          --dockerfile=$(params.subdirectory)/$(params.dockerfile) \
+              name: pypi-auth-config
-          --context=$(params.subdirectory)/$(params.context) \
+              key: password
-          --destination=$(params.imageName):$(params.tag) \
+              optional: true
-          --skip-tls-verify \
+      args:
-          --reproducible \
+        - --dockerfile=$(params.subdirectory)/$(params.dockerfile)
-          --verbosity=info \
+        - --context=$(params.subdirectory)/$(params.context)
-          --build-arg=PYPI_USERNAME=$PYPI_USERNAME \
+        - --destination=$(params.imageName):$(params.tag)
-          --build-arg=PYPI_PASSWORD=$PYPI_PASSWORD
+        - --skip-tls-verify
+        - --reproducible
+        - --verbosity=debug
+        - --build-arg=PYPI_USERNAME=$(env PYPI_USERNAME)
+        - --build-arg=PYPI_PASSWORD=$(env PYPI_PASSWORD)