28 lines
552 B
CUE
28 lines
552 B
CUE
|
package main
|
||
|
|
|
||
|
|
import (
|
||
|
|
"dagger.io/dagger"
|
||
|
|
"dagger.io/os"
|
||
|
|
)
|
||
|
|
|
||
|
|
// Test secret mount
|
||
|
|
SimpleSecret: {
|
||
|
|
// 'encrypted' and 'cleartext' must be set from identical values
|
||
|
|
encrypted: dagger.#Secret @dagger(input)
|
||
|
|
cleartext: string @dagger(input)
|
||
|
|
|
||
|
|
ctr: os.#Container & {
|
||
|
|
secret: "/secret-in": encrypted
|
||
|
|
command: "cat /secret-in > /secret-out"
|
||
|
|
}
|
||
|
|
|
||
|
|
// Decrypted secret
|
||
|
|
decrypted: (os.#File & {
|
||
|
|
from: ctr
|
||
|
|
path: "/secret-out"
|
||
|
|
}).contents @dagger(output)
|
||
|
|
|
||
|
|
// Assertion: decrypted value must match original cleartext
|
||
|
|
decrypted: cleartext
|
||
|
|
}
|