CI vault secrets & Kubernetes (#2)

* Define secrets that use vault plugin

* Fix drone linting issue

* Persist .kube folder as volume between build steps

* Split Build and Publish into separate pipelines

* Only run publish pipeline when triggered by main

* Import .kube/config from vault

* echo env variables contents into kube config file

* drone-vault not working, curl with token instead

* Removed all secrets, look to org secrets

* Kubernetes file

* Import dockerconfig from vault and apply as kubernetes secret

.kubernetes/0-namespace.yml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: schleppe-lab

.kubernetes/deployment.yml

@@ -0,0 +1,42 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    deployment.kubernetes.io/revision: '1'
+  labels:
+    app: schleppe-lab
+  name: schleppe-lab
+  namespace: schleppe-lab
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 2
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: schleppe-lab
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: schleppe-lab
+    spec:
+      containers:
+        - image: ${IMAGE}
+          imagePullPolicy: Always
+          name: schleppe-lab
+          resources: {}
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
+      imagePullSecrets:
+      - name: ghcr-login-secret
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      terminationGracePeriodSeconds: 30

.kubernetes/ghcr-token-secret.yml

@@ -0,0 +1,10 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ghcr-login-secret
+  namespace: schleppe-lab
+data:
+  .dockerconfigjson: |
+    ${DOCKER_CONFIG_BASE64}
+type: kubernetes.io/dockerconfigjson

.kubernetes/service.yml

@@ -0,0 +1,19 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: schleppe-lab
+  name: schleppe-lab-service
+  namespace: schleppe-lab
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+    targetPort: 80
+  selector:
+    app: schleppe-lab
+  sessionAffinity: None
+  type: ClusterIP
+status:
+  loadBalancer: {}