9089c41f30
Add a shared secrets file used across all destinations. Useful for things Github tokens or registry passwords. The secrets are added to a new file called `secrets-common` to highlight they are shared, and to avoid acciedentally inheriting a secret from the `secrets` file to `secrets.destination`.
35 lines
1.2 KiB
Ruby
35 lines
1.2 KiB
Ruby
require "test_helper"
|
|
|
|
class SecretsTest < ActiveSupport::TestCase
|
|
test "fetch" do
|
|
with_test_secrets("secrets" => "SECRET=ABC") do
|
|
assert_equal "ABC", Kamal::Secrets.new["SECRET"]
|
|
end
|
|
end
|
|
|
|
test "command interpolation" do
|
|
with_test_secrets("secrets" => "SECRET=$(echo ABC)") do
|
|
assert_equal "ABC", Kamal::Secrets.new["SECRET"]
|
|
end
|
|
end
|
|
|
|
test "variable references" do
|
|
with_test_secrets("secrets" => "SECRET1=ABC\nSECRET2=${SECRET1}DEF") do
|
|
assert_equal "ABC", Kamal::Secrets.new["SECRET1"]
|
|
assert_equal "ABCDEF", Kamal::Secrets.new["SECRET2"]
|
|
end
|
|
end
|
|
|
|
test "destinations" do
|
|
with_test_secrets("secrets.dest" => "SECRET=DEF", "secrets" => "SECRET=ABC", "secrets-common" => "SECRET=GHI\nSECRET2=JKL") do
|
|
assert_equal "ABC", Kamal::Secrets.new["SECRET"]
|
|
assert_equal "DEF", Kamal::Secrets.new(destination: "dest")["SECRET"]
|
|
assert_equal "GHI", Kamal::Secrets.new(destination: "nodest")["SECRET"]
|
|
|
|
assert_equal "JKL", Kamal::Secrets.new["SECRET2"]
|
|
assert_equal "JKL", Kamal::Secrets.new(destination: "dest")["SECRET2"]
|
|
assert_equal "JKL", Kamal::Secrets.new(destination: "nodest")["SECRET2"]
|
|
end
|
|
end
|
|
end
|