TeamCity
You can use the Phase CLI to effortlessly inject or expose secret inside your CI pipelines or jobs.
Prerequisites
- Have signed up for the Phase Console and created an application.
PHASE_SERVICE_TOKEN.
If you are using a Self-Hosted instance of the Phase Console, you may supply
PHASE_HOST environment variable with your URL (https://<HOST>).
For detailed cli install options, please see: Installation
Setting PHASE_SERVICE_TOKEN:
- Navigate to your TeamCity project's main page.
- Click on
Edit Project Settings. - Select
Parameterson the left menu. - Click
Add New Parameter, set its name toPHASE_SERVICE_TOKEN, choose the type asPassword, and input its value.
Singed staged
Create a TeamCity build configuration and add the following build steps:
Create a TeamCity build configuration and add the following build steps:
-
Prepare (Command Line Runner):
- Run:
Custom script - Custom script:
curl -fsSL https://pkg.phase.dev/install.sh | bash export $(phase secrets export --app "my application name" --env prod DOCKERHUB_USERNAME DOCKERHUB_TOKEN | xargs)
- Run:
-
Build and Push (Command Line Runner):
- Run:
Custom script - Custom script:
docker login -u %env.DOCKERHUB_USERNAME% -p %env.DOCKERHUB_TOKEN% docker build -t my-image . docker push my-image:latest
- Run: