9089c41f30
Add a shared secrets file used across all destinations. Useful for things Github tokens or registry passwords. The secrets are added to a new file called `secrets-common` to highlight they are shared, and to avoid acciedentally inheriting a secret from the `secrets` file to `secrets.destination`.
34 lines
808 B
Ruby
34 lines
808 B
Ruby
require "dotenv"
|
|
|
|
class Kamal::Secrets
|
|
attr_reader :secrets_files
|
|
|
|
Kamal::Secrets::Dotenv::InlineCommandSubstitution.install!
|
|
|
|
def initialize(destination: nil)
|
|
@secrets_files = \
|
|
[ ".kamal/secrets-common", ".kamal/secrets#{(".#{destination}" if destination)}" ].select { |f| File.exist?(f) }
|
|
end
|
|
|
|
def [](key)
|
|
secrets.fetch(key)
|
|
rescue KeyError
|
|
if secrets_files
|
|
raise Kamal::ConfigurationError, "Secret '#{key}' not found in #{secrets_files.join(", ")}"
|
|
else
|
|
raise Kamal::ConfigurationError, "Secret '#{key}' not found, no secret files provided"
|
|
end
|
|
end
|
|
|
|
def to_h
|
|
secrets
|
|
end
|
|
|
|
private
|
|
def secrets
|
|
@secrets ||= secrets_files.inject({}) do |secrets, secrets_file|
|
|
secrets.merge!(::Dotenv.parse(secrets_file))
|
|
end
|
|
end
|
|
end
|