Merge pull request #1307 from aluzzardi/engine-loadsecret

engine.#NewSecret support
This commit is contained in:
Andrea Luzzardi
2022-01-10 12:09:21 -08:00
committed by GitHub
6 changed files with 127 additions and 1 deletions

54
plan/task/newsecret.go Normal file
View File

@@ -0,0 +1,54 @@
package task
import (
"context"
"fmt"
"io/fs"
"strings"
"go.dagger.io/dagger/compiler"
"go.dagger.io/dagger/plancontext"
"go.dagger.io/dagger/solver"
)
func init() {
Register("NewSecret", func() Task { return &newSecretTask{} })
}
type newSecretTask struct {
}
func (t *newSecretTask) Run(ctx context.Context, pctx *plancontext.Context, s solver.Solver, v *compiler.Value) (*compiler.Value, error) {
path, err := v.Lookup("path").String()
if err != nil {
return nil, err
}
input, err := pctx.FS.FromValue(v.Lookup("input"))
if err != nil {
return nil, err
}
inputFS := solver.NewBuildkitFS(input.Result())
// FIXME: we should create an intermediate image containing only `path`.
// That way, on cache misses, we'll only download the layer with the file contents rather than the entire FS.
contents, err := fs.ReadFile(inputFS, path)
if err != nil {
return nil, fmt.Errorf("ReadFile %s: %w", path, err)
}
plaintext := string(contents)
trimSpace, err := v.Lookup("trimSpace").Bool()
if err != nil {
return nil, err
}
if trimSpace {
plaintext = strings.TrimSpace(plaintext)
}
secret := pctx.Secrets.New(plaintext)
return compiler.NewValue().FillFields(map[string]interface{}{
"output": secret.MarshalCUE(),
})
}