engine: exec: support uid/gid/mask for secret mounts

Signed-off-by: Andrea Luzzardi <aluzzardi@gmail.com>
2021-12-17 15:52:56 +01:00
parent 85114025e6
commit 82cbea8324
3 changed files with 35 additions and 5 deletions
--- a/stdlib/europa/dagger/engine/exec.cue
+++ b/stdlib/europa/dagger/engine/exec.cue
@@ -63,9 +63,9 @@ package engine
 	} | {
 		type:     "secret"
 		contents: #Secret
-		uid:      uint32 | *0
-		gid:      uint32 | *0
-		optional: true | *false
+		uid:      int | *0
+		gid:      int | *0
+		mask:     int | *0o400
 	}
 }