Pipeline YAML Reference#
This document details YAML grammar used for describing the pipelines of Semaphore 2.0 projects.
The core properties of a Semaphore pipeline configuration file are
blocks, which appear only once at the beginning of a YAML file, task,
which can appear multiple times, jobs, which can also be repeated, and
promotions that are optional and can appear only once.
Each Semaphore pipeline configuration file has a mandatory preface,
which consists of the properties version, name, and agent.
Properties#
version#
The version property is a string value that shows the version of the
pipeline YAML file that will be used.
The list of valid values for version: v1.0.
Example of version usage:
version: v1.0
the name property in the preface#
The name property is a Unicode string that assigns a name to a Semaphore
pipeline. This property is optional. It is strongly recommended, however, that you should always give descriptive names
to your Semaphore pipelines.
Note: The name property can also be found in other sections, e.g. defining the
name of a job inside a jobs block.
Example of name usage#
name: The name of the Semaphore 2.0 project
agent#
The agent property defines the hardware and software environment of the
virtual machine that runs your jobs.
Example of agent usage#
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
Note: agent can also be defined on a per task basis.
machine#
The machine property, which can only be defined under agent, requires two
properties: type and os_image.
Example of machine usage#
machine:
type: e1-standard-2
os_image: ubuntu1804
type#
The type property is intended for selecting the hardware you would
like to use on the virtual machine that runs your jobs.
A complete list of valid values for the type property is available on the
Machine Types page.
Example of type usage#
type: e1-standard-4
os_image#
os_image is an optional property that specifies the operating system image
to be used in the virtual machine. If a value is not provided, the default for
the machine type is used.
These are valid values for os_image:
The default operating system depends on the type of the machine:
- For the
e1-standard-*machine types, the default image isubuntu1804 - For the
a1-standard-*machine types, the default image ismacos-xcode14
Example of os_image usage#
os_image: ubuntu1804
containers#
The containers property, which can only be defined under agent, is an array
of docker images that will run the jobs in the pipeline.
Example of containers usage#
agent:
machine:
type: e1-standard-2
containers:
- name: main
image: 'registry.semaphoreci.com/ruby:2.6'
- name: db
image: 'registry.semaphoreci.com/postgres:9.6'
user: postgres
env_vars:
- name: POSTGRES_PASSOWRD
value: keyboard-cat
Semaphore convenience images redirection
Due to the introduction of Docker Hub rate limits, if you are using a Docker-based CI/CD environment in combination with convenience images, Semaphore will automatically redirect any pulls from the semaphoreci Docker Hub repository to the Semaphore Container Registry.
Each container entry must define a name and image property. The name of
the container is used when linking the containers together, and for defining
hostnames in the first container.
The first container runs the jobs' commands, while the rest of the containers
are linked via DNS records. The container with name db is registered with the
hostname db in the first container.
Other optional parameters of container definition can be divided into two groups:
-
Docker-related parameters that are passed to the docker run command that starts the container. More information about these can be found in docker run docs.
user- The user that will be used within the container.command- The first command to execute within the container. This overrides the command defined in Dockerfile.entrypoint- This specifies which executable to run when the container starts.
-
The data that needs to be injected into containers, which is either defined directly in the YAML file or stored in Semaphore secrets.
env_vars- Environment variables that are injected into the container. These are defined in the same way as in task definition.secrets- Secrets which hold the data to be injected into the container. They are defined in the same way as in task definition. Note: currently, only environment variables defined in a secret will be injected into container, the files within the secret will be ignored.
Docker Hub rate limits
Please note that due to the introduction of rate limits on Docker Hub, all pulls must be authenticated. If you are pulling any images from the Docker Hub public repository, please make sure you are logged in to avoid failure. You can find more information on how to authenticate in our Docker authentication guide.
A Preface example#
version: v1.0
name: The name of the Semaphore 2.0 project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Inspect Linux environment
task:
jobs:
- name: Print Envrinment variable
commands:
- echo $SEMAPHORE_PIPELINE_ID
execution_time_limit#
The concept behind the execution_time_limit property is simple: you do not
want your jobs to be executed endlessly, and you need to be able to set a time
limit for the entire pipeline as well as for individual blocks and jobs.
The execution_time_limit property can be used at the pipeline, block,
or job scope. In the latter two cases, you can use the property for multiple
blocks or jobs.
Note: At the pipeline and block scopes, execution_time_limit will
sum the runtime of all underlying elements, including the time
jobs spend waiting to execute. Please keep this in mind when using the property.
The execution_time_limit property can hold two other properties, which are
named hours and minutes, used for specifying the execution time limit in hours
and minutes, respectively. You should only use one of these two properties, i.e.
don't use both of them at the same time.
The types of the values for both the hours and minutes properties are
integers and their values should be greater than or equal to 1.
If the execution_time_limit property is not used at all, the default global
value of the execution_time_limit property is 1 hour. Additionally, if
a pipeline has only local execution_time_limit properties, the global value
of execution_time_limit will still be 1 hour.
An example of the single execution_time_limit property#
The following pipeline YAML file uses the execution_time_limit property
in a pipeline:
version: v1.0
name: Using execution_time_limit
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
execution_time_limit:
hours: 3
blocks:
- name: Creating Docker Image
task:
jobs:
- name: Docker build
commands:
- checkout
- sleep 120
- name: Building executable
task:
jobs:
- name: Building job
commands:
- echo 360
- echo "Building executable"
An example with the execution_time_limit property in a block#
The following pipeline YAML file uses two execution_time_limit properties in
a block:
version: v1.0
name: Using execution_time_limit
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Creating Docker Image
execution_time_limit:
minutes: 15
task:
jobs:
- name: Docker build
commands:
- checkout
- sleep 120
- name: Building executable
execution_time_limit:
minutes: 10
task:
jobs:
- name: Building job
commands:
- echo 360
- echo "Building executable"
An example with the execution_time_limit property in a job#
The following pipeline YAML file uses the execution_time_limit property in
a job:
version: v1.0
name: Using execution_time_limit on a job
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Tests
task:
jobs:
- name: Lint
commands:
- checkout
- make lint
- name: Tests
execution_time_limit:
minutes: 30
commands:
- checkout
- make test
An example with multiple execution_time_limit properties#
The following pipeline YAML file uses a combination of an execution_time_limit
property with a pipeline scope and a single execution_time_limit property
with a block scope:
version: v1.0
name: Using execution_time_limit
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
execution_time_limit:
hours: 5
blocks:
- name: Creating Docker Image
execution_time_limit:
minutes: 15
task:
jobs:
- name: Docker build
commands:
- checkout
- sleep 120
- name: Building executable
task:
jobs:
- name: Building job
commands:
- checkout
- echo "Building executable"
In this case, the Creating Docker Image block should finish in less than 15
minutes, while the Building executable block must finish in less than 5
hours, which is the value of the pipeline scope execution_time_limit property.
However, as blocks are currently executed sequentially, the
Building executable block should finish in 5 hours minus the time it took the
Creating Docker Image block to finish.
fail_fast#
The fail_fast property enables you to set a policy for a pipeline in the event that one of
its jobs fails.
The fail_fast property can have two sub-properties: stop and cancel.
At least one of them is required. If both are set, stop will be evaluated first.
The stop and cancel properties both require a condition defined with a when,
according to the Conditions DSL.
If this condition is fulfilled for a given pipeline's execution, the appropriate fail-fast policy is activated.
If a stop policy is set, all running jobs will be stopped and all pending
jobs will be canceled as soon as possible in the event that a job fails.
If a cancel policy is set, when one job fails, the blocks and jobs which have
not yet started executing will be canceled, but those which are already running will be
allowed to finish. This will provide you with more data for debugging
without using additional resources.
An example of setting a fail-fast stop policy#
In the following configuration, blocks A and B run in parallel. Block C runs after block B is finished.
When Block A fails, if the workflow was initiated from a non-master branch, the
fail fast stop policy will be applied to:
- Stop block B
- Cancel (i.e. not run) block C
version: v1.0
name: Setting fail fast stop policy
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
fail_fast:
stop:
when: "branch != 'master'"
blocks:
- name: Block A
dependencies: []
task:
jobs:
- name: Job A
commands:
- sleep 10
- failing command
- name: Block B
dependencies: []
task:
jobs:
- name: Job B
commands:
- sleep 60
- name: Block C
dependencies: ["Block B"]
task:
jobs:
- name: Job C
commands:
- sleep 60
An example of setting fail-fast cancel policy#
In the following configuration, blocks A and B run in parallel. Block C runs after block B is finished.
When Block A fails, if the workflow was initiated from a non-master branch, the
fail fast cancel policy will be applied to:
- Let block B finish
- Cancel (i.e. not run) block C
version: v1.0
name: Setting fail fast cancel policy
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
fail_fast:
cancel:
when: "branch != 'master'"
blocks:
- name: Block A
dependencies: []
task:
jobs:
- name: Job A
commands:
- sleep 10
- failing command
- name: Block B
dependencies: []
task:
jobs:
- name: Job B
commands:
- sleep 60
- name: Block C
dependencies: ["Block B"]
task:
jobs:
- name: Job C
commands:
- sleep 60
queue#
The optional queue property enables you to assign pipelines to custom
execution queues, and/or to configure the way the pipelines are processed when
queuing happens.
There are two ways you can define queue behaviour.
The first is with direct queue configuration, which will be applied to all
pipelines initiated with a given YAML configuration file.
The second approach is conditional queue configurations, which allows you to
define an array of queue definitions, and conditions under which those definitions
should be applied.
All the sub-properties and their potential values for both approaches are listed below and you can find more examples and use cases for different queue configurations on the Pipeline Queues page.
direct queue configuration#
When using this approach, you can use the name, scope, and processing
properties as direct sub-properties of the queue property.
Either a name or processing property is required for the queue definitions to
be valid.
The scope property can only be configured if the name property is set to a
specific value.
The name property should hold the string that uniquely identifies the desired queue
within the configured scope.
The name can be omitted if you only want to configure the processing property.
In that case, the default name will be auto-generated based on the git branch/tag
name or pull request number and the YAML configuration file name for the given
pipeline.
The scope property can have one of two values: project or organization.
If the scope is set to organization the pipelines from the queue will be
queued together with pipelines from other projects within the organization that
have a queue configuration with same name and scope values.
On the other hand, the queues with the same values for the name property in different
projects that have their scope set to project are independent and their
pipelines will not be queued together.
If the scope property is omitted, its value will be automatically set to project.
The processing property configures the way pipelines are processed in the queue
and it can have one of two values: serialized or parallel.
If processing is set to serialized, the pipelines in the queue will be
queued and executed one by one in ascending order, according to creation time.
If processing is set to parallel, all pipelines in the queue will be
executed as soon as they are created and there will be no queuing.
If the processing property is omitted, its value will be automatically set to
serialized.
conditional queue configurations#
In this approach, you should define an array of items with queue configurations
as a sub-property of the queue property.
Each array item can have the same properties, i.e. name, scope, and processing,
as in direct queue configuration.
Additionally, one other property is required in each array item: a when property that should hold the condition written in Conditions DSL.
When the queue configuration is evaluated in this approach, the when conditions
from the items in the array are evaluated one by one starting with the first item
in the array.
The evaluation is stopped as soon as one of the when conditions is evaluated
as true, and the rest of the properties from the same array item are used
to configure the queue for the given pipeline.
This means that the order of the items in the array is important and that
items should be ordered so that those with the most specific conditions are defined
first, followed by those with more generalized conditions (e.g. items with conditions such as
branch = 'develop' should be ordered before those with branch != 'master').
If none of the conditions are evaluated as true, the default queue behaviour will be used.
auto_cancel#
The auto_cancel property enables you to set a strategy for auto-canceling
pipelines in a queue when a new pipeline appears.
The auto_cancel property can have two sub-properties: running and queued.
At least one of them is required. If both are set, running will be evaluated
first.
The running and queued properties both require a condition defined with a when,
following the Conditions DSL.
If this condition is fulfilled for a given pipeline execution, the appropriate
auto-cancel strategy will be implemented.
If a running auto-cancel strategy is set, the newest pipeline in a queue will:
- cancel all older pipelines in a queue
- stop any running older pipelines in a queue
This will make new pipelines start running immediately, while making sure that pipelines from the same queue are not run in parallel.
If a queued auto-cancel strategy is set, the newest pipeline in a queue will:
- cancel all older pipelines in the queue
- wait for any pipeline running in the queue to finish
This way you will get results for anything that was already using resources, but new pipelines will be delayed while running pipelines finish.
An example of setting an auto-cancel running strategy#
In the following configuration, all pipelines initiated from a non-master branch will run immediately after auto-stopping everything else in front of them in the queue.
version: v1.0
name: Setting auto-cancel running strategy
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
auto_cancel:
running:
when: "branch != 'master'"
blocks:
- name: Unit tests
task:
jobs:
- name: Unit tests job
commands:
- echo Running unit test
An example of setting auto-cancel queued strategy#
In the following configuration, all pipelines initiated from a non-master branch will cancel any queued pipelines and wait for the one that is running to finish before starting.
version: v1.0
name: Setting auto-cancel queued strategy
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
auto_cancel:
queued:
when: "branch != 'master'"
blocks:
- name: Unit tests
task:
jobs:
- name: Unit tests job
commands:
- echo Running unit test
global_job_config#
The global_job_config property enables you to choose a set of configurations
that is shared across the whole pipeline and define it in one place instead of
having to repeat it in every task separately.
It can contain any of these properties:
The defined configuration values have the same syntax as the ones defined on the task or a job level and are applied to all the tasks and jobs in a pipeline.
In the case of prologue and env_vars the global values, i.e. values from
global_job_config, are exported first, and those defined on a
task level thereafter.
This allows for overriding of global values for the specific task, if the need arises.
In the case of epilogue, the order of exporting is reversed, so, for example,
one can first perform specific cleanup commands before global ones.
secrets are simply merged since order plays no role here.
In the case of the priority, the global values are added at the end of the list
of priorities, and their conditions defined on the job level.
This allows for job-specific priorities to be evaluated first, and only if none
of them match will the global vlaues be evaluated and used.
An example of using the global_job_config property#
version: "v1.0"
name: An example of using global_job_config
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
global_job_config:
prologue:
commands:
- checkout
env_vars:
- name: TEST_ENV_VAR
value: test_value
blocks:
- name: Linter
task:
jobs:
- name: Linter
commands:
- echo $TEST_ENV_VAR
- name: Unit tests
task:
jobs:
- name: Unit testing
commands:
- echo $TEST_ENV_VAR
- name: Integration Tests
task:
jobs:
- name: Integration testing
commands:
- echo $TEST_ENV_VAR
blocks#
The blocks property defines an array of items that holds the elements of a
pipeline. Each element of that array is called a block and can have two
properties: name, which is optional; and task, which is compulsory.
The name property in blocks#
The name property is a Unicode string that assigns a name to a block. This property is optional.
If you accidentally assign two or more blocks items the same name value,
you will get an error message similar to the following:
semaphore.yml ERROR:
Error: "There are at least two blocks with same name: Build Go project"
Semaphore assigns its own unique names to nameless blocks, which are
displayed in the Semaphore 2.0 UI.
dependencies in blocks#
When your pipeline is running blocks in parallel,
you can use the dependencies property to define the flow of execution for subsequent blocks.
The following example runs Block A and Block B in parallel at the beginning of a pipeline.
version: "v1.0"
name: Pipeline with dependencies
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: "Block A"
dependencies: []
task:
jobs:
- name: "Job A"
commands:
- echo "output"
- name: "Block B"
dependencies: []
task:
jobs:
- name: "Job B"
commands:
- echo "output"
- name: "Block C"
dependencies: ["Block A", "Block B"]
task:
jobs:
- name: "Job C"
commands:
- echo "output"
The dependencies property of Block C makes Block A and Block B run in
parallel. Once both are finished, Block C will run.
If you use the dependencies property in one block, you have to specify dependencies for all other blocks as well.
If you don't, the YAML validation error will be thrown. The following specification
is invalid, because dependencies are missing for Block A and Block B.
version: "v1.0"
name: Invalid pipeline
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: "Block A"
task:
jobs:
- name: "Job A"
commands:
- echo "output"
- name: "Block B"
task:
jobs:
- name: "Job B"
commands:
- echo "output"
- name: "Block C"
dependencies: ["Block A", "Block B"]
task:
jobs:
- name: "Job C"
commands:
- echo "output"
For more examples of common complex CI/CD workflows, see the semaphore-demo-workflows repository on GitHub. You will find specifications for fan-in/fan-out, monorepo, and multi-platform pipelines.
the task property in blocks#
All the items of a blocks list have a task property which is required.
You will learn about the properties of a task item in a little bit, but first we're going to talk about the skip and run properties in blocks.
skip in blocks#
The skip property is optional and it allows you to define conditions, written
in Conditions DSL, which are based on the branch name or tag
name of current push which initiated entire pipeline.
If a condition defined in this way is evaluated to be true, the block will be skipped.
When a block is skipped, it means that it will immediately finish with a passed result without actually running any of its jobs.
Its result_reason will be set to skipped and other blocks which depend on it
passing will be started and executed as if this block executed regularly and all
of its jobs passed.
Note: It is not possible to have both skip and run
properties defined for the same block since both of them configure the same
behavior, but in opposite ways.
Example of a block that has been skipped on all branches except master:
version: v1.0
name: The name of the Semaphore 2.0 project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Inspect Linux environment
skip:
when: "branch != 'master'"
task:
jobs:
- name: Print Environment variables
commands:
- echo $SEMAPHORE_PIPELINE_ID
- echo $HOME
the run property in blocks#
The run property is optional and it allows you to define a condition, written
in Conditions DSL, that is based on properties of the push
which initiated the entire workflow.
If the run condition is evaluated as true, the block and all of its jobs will run, otherwise the block will be skipped.
When a block is skipped, it means that it will immediately finish with a
passed result and a skipped result_reason, without actually running any of its jobs.
Note: It is not possible to have both run and skip
properties defined for the same block since both of them configure the same
behavior, but in opposite ways.
Example of a block that is run only on the master branch:
version: v1.0
name: The name of the Semaphore 2.0 project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Inspect Linux environment
run:
when: "branch = 'master'"
task:
jobs:
- name: Print Environment variables
commands:
- echo $SEMAPHORE_PIPELINE_ID
- echo $HOME
task#
The task property is a compulsory part of each block in a blocks
property. It divides a YAML configuration file into major and distinct sections.
Each task item can have multiple jobs, an optional agent section,
an optional prologue section, an optional epilogue section, an
optional env_vars block for defining environment variables, and an optional
secrets block for using predefined environment variables from predefined
secrets.
jobs#
A jobs item is a property of a task that allows you to define the commands
that you want to execute.
the agent section in a task#
The agent section under a task section is optional and can coexist with the
global agent definition at the beginning of a Pipeline YAML file. The
properties and the possible values of the agent section can be found in the
agent reference.
An agent block under a task block overrides the global agent definition.
secrets#
The secrets property uses pre-existing environment variables from
a secret. This is described in the The secrets property
section.
prologue#
A prologue block is executed before the commands of each job within a task
item.
You can consider the prologue commands as a part of each of the jobs within
the same task item.
epilogue#
An epilogue block is executed after the commands of each jobs item within a
task.
env_vars#
The elements of an env_vars array are name and value pairs that hold the name
of the environment variable and the value of the environment variable.
Example of the env_varsproperty#
version: v1.0
name: A Semaphore 2.0 project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
task:
jobs:
- name: Check environment variables
commands:
- echo $HOME
- echo $PI
- echo $VAR1
env_vars:
- name: PI
value: "3.14159"
- name: VAR1
value: This is Var 1
The preceding pipeline YAML file defines two environment variables named VAR1
and PI. Both environment variables have string values, which means that
numeric values must be included in double quotes.
Example of the task property#
version: v1.0
name: The name of the Semaphore 2.0 project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
task:
jobs:
- name: Check environment variables
commands:
- echo $SEMAPHORE_PIPELINE_ID
- echo $HOME
- echo $PI
- pwd
prologue:
commands:
- checkout
env_vars:
- name: PI
value: "3.14159"
Caution: The indentation level of the prologue, epilogue, env_vars, and
jobs properties should be the same.
Example of a task block with an agent#
version: v1.0
name: YAML file example with task and agent.
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Run in Linux environment
task:
jobs:
- name: Learn about SEMAPHORE_GIT_DIR
commands:
- echo $SEMAPHORE_GIT_DIR
- name: Run in macOS environment
task:
agent:
machine:
type: a1-standard-4
os_image: macos-xcode14
jobs:
- name: Using agent job
commands:
- echo $PATH
jobs#
The jobs items are essential for each pipeline because they allow you to
define the actual commands that you want to execute.
the name property in jobs#
The value of the optional name property is a Unicode string that provides a
name for a job.
Semaphore assigns its own names to nameless jobs items, which is
displayed in the UI.
Tip: It is strongly recommended that you give descriptive names to all
jobs and blocks items in a Semaphore pipeline.
commands#
The commands property is an array of strings that holds the commands that
will be executed for a job.
Example of the commands property#
The general structure of a job when using the commands property is as follows:
version: v1.0
name: The name of the Semaphore 2.0 project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
task:
jobs:
- name: Check environment variables
commands:
- echo $SEMAPHORE_PIPELINE_ID
- pwd
commands_file#
The commands_file file property allows you to define the path of a plain text
file containing the commands of a job that is an item in a jobs list,
prologue block, or epilogue block, instead of using a commands list.
You cannot use both commands_file and commands when defining a job,
prologue, or epilogue item. Moreover, you cannot have a job, prologue,
or epilogue properly defined if both the commands and commands_file
properties are missing, i.e. you must use one (and only one).
Example of the commands_file property#
The contents of the YAML file that defines the pipeline are as follows:
version: v1.0
name: Using commands_file
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Calling text file
task:
jobs:
- name: Using command_file
commands_file: file_with_commands
prologue:
commands:
- checkout
The contents of file_with_commands are as follows:
echo "Command File"
echo "Exit command_file"
Some information about what happens behind the scenes: Semaphore 2.0
reads the plain text file and creates an equivalent job using a
commands block, which is what is finally executed. This means that
the commands_file property is replaced before the job is started and the
machine begins its execution.
Note The location of the commands_file file is relative to the pipeline file. For example, if your pipeline file is located in .semaphore/semaphore.yml, the file_with_commands.sh in the above example is assumed to live in .semaphore/file_with_commands.sh.
env_vars and jobs#
An env_vars block can also be defined within a jobs block on a local
scope in addition to an env_vars block that is defined on the task level,
where its scope is the entire task block. In that case, the environment
variables of the local env_vars block will be only visible to the jobs
block it belongs to.
If one or more environment variables are defined on both a jobs level and a
task level, the values of the environment variables that are defined on the
jobs level take precedence over the values of the environment variables defined on the task level.
Example of the env_vars property in jobs#
version: v1.0
name: Using env_vars per jobs
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Using Local Environment variables only
task:
jobs:
- name: Job that uses local env_vars
commands:
- echo $APP_ENV
env_vars:
- name: APP_ENV
value: This is APP_ENV
- name: VAR_2
value: This is VAR_2 from First Job
- name: Both local and global env_vars
task:
env_vars:
- name: APP_ENV
value: prod
- name: VAR_1
value: VAR_1 from outer env_vars
jobs:
- name: Using both global and local env_vars
commands:
- echo $VAR_1
- echo $VAR_2
- echo $APP_ENV
env_vars:
- name: VAR_1
value: This is VAR_1
- name: VAR_2
value: This is VAR_2
- name: Second job - no local env_vars
commands:
- echo $VAR_1
- echo $APP_ENV
priority#
The priority property allows you to configure a job priority that affects the
order in which jobs are started when the parallel jobs quota for the organization
is reached.
This property holds a list of items, where each item has a value property that represents
the numerical value for its job priority in a range from a 0 to a 100, and a when
condition property written in Conditions DSL.
The items are evaluated from the top of the list and the value of the first item
for which the when condition is evaluated as true will be set as top priority for the
given job.
If none of the conditions are evaluated as true, the default job priority will be set.
Example of the priority property#
The following pipeline illustrates the use of the priority property:
version: v1.0
name: Job priorities
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Tests
task:
jobs:
- name: Unit tests
priority:
- value: 70
when: "branch = 'master'"
- value: 45
when: true
commands:
- make unit-test
- name: Integration tests
priority:
- value: 58
when: "branch = 'master'"
- value: 42
when: true
commands:
- make integration-test
matrix#
The matrix property allows you to define one or more environment variable
sets with multiple values. In such a setup, n parallel jobs are created,
where n equals the cardinality of the Cartesian product of all environment
variable sets.
So, the final outcome of the matrix property is the creation of multiple
parallel jobs with exactly the same commands that are defined in the respective
commands property. Each generated job is assigned with the environment
variables from the corresponding element of the Cartesian product.
Example of the matrix property#
The following pipeline illustrates the use of the matrix property:
version: v1.0
name: Using the matrix property
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Elixir + Erlang
task:
jobs:
- name: Elixir + Erlang matrix
commands:
- echo $ELIXIR
- echo $ERLANG
matrix:
- env_var: ELIXIR
values: ["1.3", "1.4"]
- env_var: ERLANG
values: ["19", "20", "21"]
In this example, the job specification named Elixir + Erlang matrix expands
to 6 parallel jobs as there are 2 x 3 = 6 combinations of the provided
environment variables:
Elixir + Erlang matrix - ELIXIR=1.4, ERLANG=21Elixir + Erlang matrix - ELIXIR=1.4, ERLANG=20Elixir + Erlang matrix - ELIXIR=1.4, ERLANG=19Elixir + Erlang matrix - ELIXIR=1.3, ERLANG=21Elixir + Erlang matrix - ELIXIR=1.3, ERLANG=20Elixir + Erlang matrix - ELIXIR=1.3, ERLANG=19
parallelism#
The parallelism property can be used to easily generate a set of jobs with same
commands that can be parameterized.
Each of those jobs will have environment variables with the total number of
jobs and the index of a particular job that can be used as parameters.
The parallelism property expects integer values larger than 1.
The following environment variables are added to each generated job:
SEMAPHORE_JOB_COUNT- total number of jobs generated via theparallelismpropertySEMAPHORE_JOB_INDEX- value in the range from1toSEMAPHORE_JOB_COUNT, which represents the index of a particular job in the list of generated jobs.
Note: It is not possible to have both parallelism and matrix
properties defined for the same job, as parallelism functionality is a subset
of matrix functionality.
Example of using the parallelism property#
When the following configuration is used:
version: v1.0
name: Using the parallelism property
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Example for parallelism
task:
jobs:
- name: Parallel job
parallelism: 4
commands:
- echo Job $SEMAPHORE_JOB_INDEX out of $SEMAPHORE_JOB_COUNT
- make test PARTITION=$SEMAPHORE_JOB_INDEX
It will automatically create 4 jobs with the following names:
Parallel job - 1/4Parallel job - 2/4Parallel job - 3/4Parallel job - 4/4
prologue and epilogue#
Each task element can have a single prologue and a single epilogue
element. The prologue and epilogue properties are both optional.
The prologue property#
A prologue block in a task block is used when you want to execute certain
commands prior to the commands of each job of a given task. This is usually the
case with initialization commands that install software, start or stop
services, etc.
Please notice that a pipeline will fail if a command in a prologue block
fails to execute for some reason.
Example of the prologue property#
version: v1.0
name: YAML file illustrating the prologue property
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Display a file
task:
jobs:
- name: Display hw.go
commands:
- ls -al
- cat hw.go
prologue:
commands:
- checkout
The epilogue property#
An epilogue block should be used when you want to execute commands after
a job has finished, either successfully or unsuccessfully.
Please notice that a pipeline will not fail if one or more commands in the
epilogue fail to execute for some reason. Also, epilogue commands will not run
if the job was stopped, canceled or timed-out.
There are three types of epilogue commands:
-
Epilogue commands that are always executed. Defined with
alwaysin the epilogue section. -
Epilogue commands that are executed when the job passes. Defined with
on_passin the epilogue section. -
Epilogue commands that are executed when the job fails. Defined with
on_failin the epilogue sections.
The order of command execution is as follows:
- First, the
alwayscommands are executed - Then, the
on_passoron_failcommands are executed
Example of the epilogue property#
version: v1.0
name: YAML file illustrating the epilogue property
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Linux version
task:
jobs:
- name: Execute uname
commands:
- uname -a
epilogue:
always:
commands:
- echo "this command is executed for both passed and failed jobs"
on_pass:
commands:
- echo "This command runs if job has passed"
on_fail:
commands:
- echo "This command runs if job has failed"
Commands can be defined as a list directly in the YAML file, as in the above
example, or via the commands_file property:
version: v1.0
name: YAML file illustrating the epilogue property
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Linux version
task:
jobs:
- name: Execute uname
commands:
- uname -a
epilogue:
always:
commands_file: file_with_epilogue_always_commands.sh
on_pass:
commands_file: file_with_epilogue_on_pass_commands.sh
on_fail:
commands_file: file_with_epilogue_on_fail_commands.sh
Where the content of the files is a list of commands, as in the following example:
echo "hello from command file"
echo "hello from $SEMAPHORE_GIT_BRANCH/$SEMAPHORE_GIT_SHA"
The location of the file is relative to the pipeline file. For example, if your
pipeline file is located in .semaphore/semaphore.yml, the
file_with_epilogue_always_commands.sh in the above example is assumed to live
in .semaphore/file_with_epilogue_always_commands.sh.
The secrets property#
A secret is a place for keeping sensitive information in the form of
environment variables and small files. Sharing sensitive data in a secret is
both safer and more flexible than storing it using plain text files or
environment variables that anyone can access. A secret is defined using specific
YAML grammar
and processed using the sem command line tool.
The secrets property is used for importing all the environment variables
and files from an existing secret into a Semaphore 2.0 organization.
If one or more names of the environment variables from two or more imported secrets are the same, then the shared environment variables will have the value that was found in the secret that was imported last. The same rule applies to the files in secrets.
Additionally, if you try to use a name value that does not exist, the
pipeline will fail to execute.
the name property in secrets#
The name property is compulsory in a secrets block because it specifies the
secret that you want to import. Please note that the specified secret or
secrets must be found within the active organization.
files in secrets#
You can store one or more files in a secret.
You do not need any extra work for using a file that you stored in a secret,
apart from including the name of the secret that holds the file in the
secrets list of the pipeline YAML file. Apart from that, the only other requirement is
remembering the name of the file, which is the value you put in the path
property when creating the secret.
All files in secrets are restored in the home directory of the user of the
Virtual Machine (VM), which is /home/semaphore.
Example of secrets with environment variables#
version: v1.0
name: Pipeline configuration with secrets
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- task:
jobs:
- name: Using secrets
commands:
- echo $USERNAME
- echo $PASSWORD
secrets:
- name: mysql-secrets
Environment variables imported from a secrets property are used like regular
environment variables defined in an env_vars block.
Example of secrets with files#
version: v1.0
name: Using files in secrets in Semaphore 2.0
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- task:
jobs:
- name: file.txt
commands:
- checkout
- ls -l ~/file.txt
- cd ..
- cat file.txt
- echo $SECRET_ONE
secrets:
- name: more-secrets
- name: my-secrets
In this case, the name of the file that was saved in a secret is file.txt
and is located at the home directory of the VM.
after_pipeline#
The after_pipeline property is used for defining a set of jobs that will
execute when the pipeline is finished. The after_pipeline property is most
commonly used for sending notifications, collecting test results, and submitting
metrics.
For example, to submit pipeline duration metrics and to publish test results, you
would define the after_pipeline with the following YAML snippet:
after_pipeline:
task:
jobs:
- name: Submit Metrics
commands:
- "export DURATION_IN_MS=$((SEMAPHORE_PIPELINE_TOTAL_DURATION * 1000))"
- echo "ci.duration:${DURATION_IN_MS}|ms" | nc -w 3 -u statsd.example.com
- name: Publish Tests
commands:
- test-results gen-pipeline-report
Jobs in the after_pipeline task are always executed regardless of the result
of the pipeline. Meaning that the after_pipeline jobs are executed on passed,
failed, stopped, and canceled pipelines.
Environment variables available in after_pipeline jobs#
All SEMAPHORE_* environment variables that are injected into regular pipeline
jobs, are also injected into after_pipeline jobs.
Additionally, Semaphore injects environment variables that describe the state, result, and duration of the executed
pipeline into after_pipeline jobs.
See which environment variables are injected into after_pipeline jobs.
Global jobs config is not applied to after_pipeline jobs#
Global job config is not applied to after_pipeline jobs. This includes secrets,
prologue, and epilogue commands that are defined in the global job configuration
stanza.
promotions#
The promotions property is used for promoting (manually or automatically
triggering) one or more pipelines using one or more pipeline YAML files. A pipeline YAML file can have a single promotions block or
no promotions blocks.
The items of a promotions block are called targets and are implemented using
pairs of name and pipeline_file properties. A promotions block can have
multiple targets.
You can promote a target from the UI at any point, even while the pipeline that owns that target is still running.
The name property in promotions#
The name property in a promotions block is a Unicode string and is compulsory. It defines the name of a
target.
pipeline_file#
The pipeline_file property of the promotions block is a path to another pipeline YAML file within the repository of the
Semaphore project. This property is compulsory.
If pipeline_file is a relative path, Semaphore will search for the file inside the directory of the current pipeline.
If pipeline_file is an absolute path (starts with / character), Semaphore will seek the file starting from the root directory of repository.
Each pipeline_file value must be a valid and syntactically correct pipeline
YAML file as defined in this document. However, potential errors in a
pipeline YAML file, given as a value to the pipeline_file property,
will be revealed when the relevant target is promoted.
The same will happen if the file given as a pipeline_file value does not
exist – an error will be revealed at the time of promotion.
Example of the promotions property#
The contents of the .semaphore/semaphore.yml are as follows:
version: v1.0
name: Using promotions
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: ls
task:
jobs:
- name: List contents
commands:
- ls -al
- echo $SEMAPHORE_PIPELINE_ID
promotions:
- name: Pipeline 1
pipeline_file: p1.yml
- name: Pipeline 2
pipeline_file: p2.yml
The promotions block in the aforementioned .semaphore/semaphore.yml file
will allow you to promote two other YAML files named p1.yml and
p2.yml.
The contents of the .semaphore/p1.yml are as follows:
version: v1.0
name: This is Pipeline 1
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Environment variable
task:
jobs:
- name: SEMAPHORE_PIPELINE_ID
commands:
- echo $SEMAPHORE_PIPELINE_ID
Last, the contents of the .semaphore/p2.yml are as follows:
version: v1.0
name: This is Pipeline 2
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: List VM Linux version
task:
jobs:
- name: uname
commands:
- echo $SEMAPHORE_PIPELINE_ID
- uname -a
auto_promote#
The auto_promote property is optional and it allows you to specify a set of
conditions under which a pipeline will be promoted automatically.
It requires conditions to be defined in a when sub-property, following the
Conditions DSL.
If these conditions are fulfilled for a given pipeline's execution, the appropriate promotion will be triggered automatically.
You can define conditions based on values for the following properties of the original pipeline:
branch- the name of the branch for which the pipeline is initiated (empty in the case of a tag or pull request)tag- the name of the tag for which the pipeline is initiated (empty in the case of branch or pull-requests)pull request- the number of pull request for which the pipeline is initiated (empty in the case of a branch or tag)change_in- at least one file has changed in a given path (used for monorepo workflows)result- the result of a pipeline's execution (see possible values below)result_reason- the reason for a specific pipeline execution result (see possible values for each result type below)
The valid values for result are:
passed: all the blocks in the pipeline ended successfullystopped: the pipeline was stopped either by the user or by the systemcanceled: the pipeline was canceled either by the user or by the system (the difference betweencanceledandstoppedis if the result iscanceledit means that pipeline was terminated before any block or job started to execute)failed: the pipeline failed either due to a pipeline YAML syntax error or because at least one of the blocks of the pipeline failed due to a command not being successfully executed.
The valid values for result_reason are:
test: one or more user tests failedmalformed: the pipeline YAML file is not correctstuck: the pipeline jammed for internal reasons and then abortedinternal: the pipeline was terminated for internal reasonsuser: the pipeline was stopped on user requeststrategy: the pipeline was terminated due to an auto-cancel strategytimeout: the pipeline exceeded the execution time limit
Not all result and result_reason combinations can coexist. For example, you
cannot have passed as the value of result and malformed as the value of
result_reason. On the other hand, you can have failed as the value of
result and malformed as the value of result_reason.
For example, a result value of failed, the valid values of result_reason are
test, malformed, and stuck. When the result value is stopped or
canceled, the list of valid values for result_reason are internal,
user, strategy, and timeout.
Example of auto_promote#
The following pipeline YAML file presents two examples using auto_promote and
depends on three other pipeline YAML files named p1.yml, p2.yml, and p3.yml:
version: v1.0
name: Testing Auto Promoting
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
promotions:
- name: Staging
pipeline_file: p1.yml
auto_promote:
when: "result = 'passed' and (branch = 'master' or tag =~ '^v1\.')"
- name: Documentation
pipeline_file: p2.yml
auto_promote:
when: "branch = 'master' and change_in('/docs/')"
- name: Production
pipeline_file: p3.yml
blocks:
- name: Block 1
task:
jobs:
- name: Job 1 - Block 1
commands:
- echo $SEMAPHORE_GIT_BRANCH
- name: Block 2
task:
jobs:
- name: Job 1 - Block 2
commands:
- echo Job 1 - Block 2
- echo $SEMAPHORE_GIT_BRANCH
- name: Job 2 - Block 2
commands:
- echo Job 2 - Block 2
According to the specified rules, only the Staging and Documentation promotions
can be auto-promoted – when the conditions specified in the when sub-property of
auto_promote property are fulfilled. However, the Production promotion has no
auto_promote property, so it can't be auto-promoted.
Therefore, if the pipeline finishes with a passed result and was initiated from the
master branch, then the p1.yml pipeline file will be auto-promoted.
The same will happen if the pipeline was initiated from the tag with a name
that matches the expression given in PCRE (Perl Compatible Regular Expression)
syntax, which is, in this case, any string that starts with v1..
Documentation promotion will be auto-promoted when initiated from
the master branch, while there is at least one changed file in the docs folder
(relative to the root of the repository). Check the
change_in reference for additional usage details.
The content of p1.yml is as follows:
version: v1.0
name: Pipeline 1
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Environment variable
task:
jobs:
- name: SEMAPHORE_PIPELINE_ID
commands:
- echo $SEMAPHORE_PIPELINE_ID
The content of p2.yml is as follows:
version: v1.0
name: Pipeline 2
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Update docs
task:
jobs:
- name: make docs
commands:
- make docs
Finally, the contents of p3.yml is as follows:
version: v1.0
name: This is Pipeline 3
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: List VM Linux version
task:
jobs:
- name: uname
commands:
- echo $SEMAPHORE_PIPELINE_ID
- uname -a
All the displayed files are correct pipeline YAML files that could
be used as semaphore.yml files.
auto_promote_on - DEPRECATED#
Note: The auto_promote_on property has been deprecated in favor of the auto_promote property.
The auto_promote_on property is used for automatically promoting one or more
branches of promotions blocks according to user-specified rules.
The auto_promote_on property is a list of items that supports three
properties: result, which is mandatory; branch, which is optional; and
result_reason, which is also optional.
For a auto_promote_on branch to execute, the return values of all the used
properties of that branch must be true.
result#
The value of the result property is a string that is used for matching the
status of a pipeline.
The list of valid values for result: passed, stopped, canceled, and
failed is shown below.
passed: all the blocks in the pipeline ended successfullystopped: the pipeline was stopped either by the user or by the systemcanceled: the pipeline was cancelled either by the user or by the system. (the difference betweencanceledandstoppedis that a pipeline that is not running can be cancelled but cannot be stopped)failed: the pipeline failed either due to a pipeline YAML syntax error or because at least one of the blocks of the pipeline failed due to a command not being successfully executed.
branch#
The branch property is a list of items. Its items are regular expressions
that Semaphore 2.0 tries to match against the name of the branch that
is used with the pipeline that is being executed. If any of them is a match,
then the return value of the branch is true.
The branch property uses Perl Compatible Regular Expressions.
In order for a branch value to match the master branch only and not match
names such as this-is-not-master or a-master-alternative, you should use
^master$ as the value of the branch property. The same rule applies for
matching words or strings.
In order for a branch value to match branches that begin with dev you
should use something like ^dev.
result_reason#
The value of the result_reason property is a string that defines the reason
behind the value of the result property.
The list of valid values for result_reason are: test, malformed, stuck,
deleted, internal, and user.
test: one or more user tests failedmalformed: the pipeline YAML file is not correctstuck: the pipeline jammed for internal reasons and then aborteddeleted: the pipeline was terminated because the branch was deleted while the pipeline was runninginternal: the pipeline was terminated for internal reasonsuser: the pipeline was stopped on user request
Not all result and result_reason combinations can coexist. For example, you
cannot have passed as the value of result and malformed as the value of
result_reason. On the other hand, you can have failed as the value of
result and malformed as the value of result_reason.
For example a result value of failed, the valid values of result_reason are
test, malformed, and stuck. When the result value is stopped or
canceled, the list of valid values for result_reason are deleted,
internal, and user.
Example of auto_promote_on - DEPRECATED#
Note: The auto_promote_on property has been deprecated in favor of the auto_promote property.
The following pipeline YAML file shows an example use of auto_promote_on
and depends on two other pipeline YAML files named p1.yml and p2.yml:
version: v1.0
name: Testing Auto Promoting
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
promotions:
- name: Staging
pipeline_file: p1.yml
auto_promote_on:
- result: passed
branch:
- "master"
- ^refs/tags/v1.*
- result: failed
branch:
- "v2."
result_reason: malformed
- name: prod
pipeline_file: p2.yml
blocks:
- name: Block 1
task:
jobs:
- name: Job 1 - Block 1
commands:
- echo $SEMAPHORE_GIT_BRANCH
- name: Job 2 - Block 1
commands:
- echo Job 2 - Block 1
- name: Block 2
task:
jobs:
- name: Job 1 - Block 2
commands:
- echo Job 1 - Block 2
- echo $SEMAPHORE_GIT_BRANCH
- name: Job 2 - Block 2
commands:
- echo Job 2 - Block 2
According to the specified rules, only the Staging promotion of the promotions
list can be auto-promoted – this depends on the rules of the two items of
the auto_promote_on list. However, the prod promotion of the promotions
list has no auto_promote_on property so there is no way it can be auto-promoted.
So, if the pipeline finishes with a passed result and the branch name contains the word master, then the p1.yml pipeline file will be auto-promoted. The same will happen if the the pipeline finishes with a failed result. The result_reason is malformed and the branch name contains the v2 sequence of characters followed by at least one more character, because a . character in a Perl Compatible Regular Expression means one or more characters.
The contents of p1.yml are as follows:
version: v1.0
name: Pipeline 1
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Environment variable
task:
jobs:
- name: SEMAPHORE_PIPELINE_ID
commands:
- echo $SEMAPHORE_PIPELINE_ID
The contents of p2.yml are as follows:
version: v1.0
name: This is Pipeline 2
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: List VM Linux version
task:
jobs:
- name: uname
commands:
- echo $SEMAPHORE_PIPELINE_ID
- uname -a
Both p1.yml and p2.yml are correct pipeline YAML files that could
be used as semaphore.yml files.
Complete Configuration examples#
A complete .semaphore/semaphore.yml example#
The following code presents a complete .semaphore/semaphore.yml file:
version: v1.0
name: YAML file example for Go project
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- name: Inspect Linux environment
task:
jobs:
- name: Execute hw.go
commands:
- echo $SEMAPHORE_PIPELINE_ID
- echo $HOME
- echo $SEMAPHORE_GIT_DIR
- echo $PI
prologue:
commands:
- checkout
env_vars:
- name: PI
value: "3.14159"
- name: Build Go project
task:
jobs:
- name: Build hw.go
commands:
- checkout
- change-go-version 1.10
- go build hw.go
- ./hw
- name: PATH variable
commands:
- echo $PATH
epilogue:
always:
commands:
- echo "The job finished with $SEMAPHORE_JOB_RESULT"
on_pass:
commands:
- echo "Executed when the SEMAPHORE_JOB_RESULT is passed"
on_fail:
commands:
- echo "Executed when the SEMAPHORE_JOB_RESULT is failed"
A .semaphore/semaphore.yml file that uses secrets#
version: v1.0
name: Pipeline configuration with secrets
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- task:
jobs:
- name: Using secrets
commands:
- checkout
- ls -l .semaphore
- echo $SEMAPHORE_PIPELINE_ID
- echo $SECRET_ONE
- echo $SECRET_TWO
- name: Using SECRET_TWO
commands:
- checkout
- echo $SECRET_TWO
- ls -l .semaphore
secrets:
- name: mySecrets
- name: more-mihalis-secrets
A .semaphore/semaphore.yml file without name properties#
Although you can have .semaphore/semaphore.yml files without
name properties, it is considered a poor practice and should be
avoided.
However, the following sample .semaphore/semaphore.yml file proves
that it can be done:
version: v1.0
name: Basic YAML configuration file example.
agent:
machine:
type: e1-standard-2
os_image: ubuntu1804
blocks:
- task:
jobs:
- commands:
- echo $SEMAPHORE_PIPELINE_ID
- echo "Hello World!"
The order of execution#
You cannot and you should not make any assumptions about the order of various
jobs items of a task are going to be executed. This means that the jobs of
a task item might not start in order of definition.
However, the blocks items of a .semaphore/semaphore.yml file, which are
task items, are executed sequentially. This means that if you have two task
items in a .semaphore/semaphore.yml file, the second one will begin only
when the first one has finished.
Last, the jobs of a block will run in parallel provided that you have the required capacity (boxes) available.
Comments#
Lines that begin with # are considered comments and are ignored by the
YAML parser, which is not a Semaphore 2.0 feature, rather the way YAML files function.