a9fd97d7fe
Before, secret was a plain text string, but it could lead to security issue so we are now handling secrets as `dagger.#Secret` or string. I've add a new struct SecretStore that expose the inputStore to easily retrieve secret value. Signed-off-by: Tom Chauveau <tom.chauveau@epitech.eu>
59 lines
1.0 KiB
Go
59 lines
1.0 KiB
Go
package solver
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
|
|
"github.com/moby/buildkit/session"
|
|
"github.com/moby/buildkit/session/secrets"
|
|
"github.com/moby/buildkit/session/secrets/secretsprovider"
|
|
"github.com/rs/zerolog/log"
|
|
"go.dagger.io/dagger/state"
|
|
)
|
|
|
|
type SecretsStore struct {
|
|
Secrets session.Attachable
|
|
Store *inputStore
|
|
}
|
|
|
|
func NewSecretsStoreProvider(st *state.State) SecretsStore {
|
|
store := &inputStore{st}
|
|
|
|
return SecretsStore{
|
|
Secrets: secretsprovider.NewSecretProvider(store),
|
|
Store: store,
|
|
}
|
|
|
|
}
|
|
|
|
type inputStore struct {
|
|
st *state.State
|
|
}
|
|
|
|
func (s *inputStore) GetSecret(ctx context.Context, id string) ([]byte, error) {
|
|
lg := log.Ctx(ctx)
|
|
|
|
const secretPrefix = "secret="
|
|
|
|
if !strings.HasPrefix(id, secretPrefix) {
|
|
return nil, secrets.ErrNotFound
|
|
}
|
|
|
|
id = strings.TrimPrefix(id, secretPrefix)
|
|
|
|
input, ok := s.st.Inputs[id]
|
|
if !ok {
|
|
return nil, secrets.ErrNotFound
|
|
}
|
|
if input.Secret == nil {
|
|
return nil, secrets.ErrNotFound
|
|
}
|
|
|
|
lg.
|
|
Debug().
|
|
Str("id", id).
|
|
Msg("injecting secret")
|
|
|
|
return []byte(input.Secret.PlainText()), nil
|
|
}
|