3e4a190173
In Dotenv 3.1.5, `Dotenv.parse` no longer returns values that are already in the environment. See https://github.com/bkeepers/dotenv/issues/518 We can get the values though by setting overwrite: true, which works with both 3.1.4 and 3.1.5.
43 lines
1.1 KiB
Ruby
43 lines
1.1 KiB
Ruby
require "dotenv"
|
|
|
|
class Kamal::Secrets
|
|
Kamal::Secrets::Dotenv::InlineCommandSubstitution.install!
|
|
|
|
def initialize(destination: nil)
|
|
@destination = destination
|
|
@mutex = Mutex.new
|
|
end
|
|
|
|
def [](key)
|
|
# Fetching secrets may ask the user for input, so ensure only one thread does that
|
|
@mutex.synchronize do
|
|
secrets.fetch(key)
|
|
end
|
|
rescue KeyError
|
|
if secrets_files.present?
|
|
raise Kamal::ConfigurationError, "Secret '#{key}' not found in #{secrets_files.join(", ")}"
|
|
else
|
|
raise Kamal::ConfigurationError, "Secret '#{key}' not found, no secret files (#{secrets_filenames.join(", ")}) provided"
|
|
end
|
|
end
|
|
|
|
def to_h
|
|
secrets
|
|
end
|
|
|
|
def secrets_files
|
|
@secrets_files ||= secrets_filenames.select { |f| File.exist?(f) }
|
|
end
|
|
|
|
private
|
|
def secrets
|
|
@secrets ||= secrets_files.inject({}) do |secrets, secrets_file|
|
|
secrets.merge!(::Dotenv.parse(secrets_file, overwrite: true))
|
|
end
|
|
end
|
|
|
|
def secrets_filenames
|
|
[ ".kamal/secrets-common", ".kamal/secrets#{(".#{@destination}" if @destination)}" ]
|
|
end
|
|
end
|