stdlib: update gcp to use secrets

Signed-off-by: Andrea Luzzardi <aluzzardi@gmail.com>
2021-05-27 19:11:01 -07:00
parent f2819dc1a5
commit 28fd9c341f
10 changed files with 63 additions and 48 deletions
--- a/stdlib/gcp/gcloud.cue
+++ b/stdlib/gcp/gcloud.cue
@@ -32,14 +32,9 @@ import (
 			]
 		},

-		// Setup auth
-		op.#WriteFile & {
-			dest:    "/service_key"
-			content: config.serviceKey
-		},
-
 		op.#Exec & {
 			args: ["gcloud", "-q", "auth", "activate-service-account", "--key-file=/service_key"]
+			mount: "/service_key": secret: config.serviceKey
 		},

 		op.#Exec & {