gitlab-ci.yml jobs:build-production config key may not be used with `rules`: only

Question

I am having a syntax error when I test my gitlab-ci.yml in CI Lint. Can someone suggest a solution to this problem?

build-production:
  stage: build
  only:
    - master
  image:
    name: gcr.io/kaniko-project/executor:debug
    entrypoint: [""]
  script:
    - mkdir -p /kaniko/.docker
    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json
    - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --destination $CI_REGISTRY_IMAGE:$CI_COMMIT_TAG
  rules:
    - if: $CI_COMMIT_TAG

Status: syntax is incorrect 

jobs:build-production config key may not be used with `rules`: only

score 107 · Accepted Answer · edited Jul 21 '21 at 15:22

107

Documentation is pretty clear :

rules replaces only/except and they can’t be used together in the same job. If you configure one job to use both keywords, the linter returns a key may not be used with rules error.

I suggest to use rules: for both of your conditions :

rules:
  - if: '$CI_COMMIT_REF_NAME == "master" && $CI_COMMIT_TAG'

edited Jul 21 '21 at 15:22

Evan Carroll

78,363
46
261
468

answered Apr 08 '21 at 19:54

Nicolas Pepinster

5,413
2
30
48

16

The documentation is clear, it's a shame the error message is not. First rule of intuitive design, if your solution is "we'll document that" you're making a mistake. – Liam Sep 29 '22 at 09:13
what is `&& $CI_COMMIT_TAG` does here? – luochen1990 May 16 '23 at 09:32
it means if the pipeline is executed on a git tag. – Nicolas Pepinster May 16 '23 at 09:41

score 2 · Answer 2 · answered Mar 09 '22 at 15:23

This is not correct, unless you would create a tag master.

See: https://gitlab.sron.nl/help/ci/variables/predefined_variables.md

CI_COMMIT_REF_NAME
The branch or tag name for which project is built.

There is a workaround described here: Gitlab CI: Run Pipeline job only for tagged commits that exist on protected branches

gitlab-ci.yml jobs:build-production config key may not be used with `rules`: only

2 Answers2

Linked