chore (Jenkinsfile): package and deploy

.gitignore

@@ -1,2 +1,3 @@
 .idea
-*.iml
+*.iml
+target

Jenkinsfile

@@ -12,5 +12,26 @@ pipeline {
                 }
             }
         }
+        stage('Package') {
+            steps {
+                container('chart-testing'){
+                    sh "mkdir target"
+                    sh "for dir in charts/*; do helm package --destination target \"\$dir\"; done"
+                }
+            }
+        }
+        stage('Deploy') {
+            steps {
+                container('vault') {
+                    script {
+                        env.NEXUS_USER = sh(script: 'vault read -field=username secret/ops/account/nexus', returnStdout: true)
+                        env.NEXUS_PWD = sh(script: 'vault read -field=password secret/ops/account/nexus', returnStdout: true)
+                    }
+                }
+                container('alpine') {
+                    sh "for chart in target/*; do curl -L -u ${NEXUS_USER}:${NEXUS_PWD} http://registry.molgenis.org/repository/helm/ --upload-file \"\$chart\"; done"
+                }
+            }
+        }
     }
 }

charts/molgenis-jenkins/values.yaml

@@ -593,6 +593,29 @@ jenkins:
           Command: cat
           WorkingDir: /home/jenkins
           TTY: true
+        alpine:
+          Image: "spotify/alpine"
+          Command: cat
+          WorkingDir: /home/jenkins
+          TTY: true
+        vault:
+          Image: "vault"
+          Command: cat
+          WorkingDir: /home/jenkins
+          TTY: true
+          EnvVars:
+            - type: Secret
+              key: VAULT_TOKEN
+              secretName: molgenis-pipeline-vault-secret
+              secretKey: token
+            - type: Secret
+              key: VAULT_SKIP_VERIFY
+              secretName: molgenis-pipeline-vault-secret
+              secretKey: skipVerify
+            - type: Secret
+              key: VAULT_ADDR
+              secretName: molgenis-pipeline-vault-secret
+              secretKey: addr
       NodeSelector: {}
 
 # secret contains configuration for the kubernetes secrets that jenkins can access