drone-yaml/yaml/compiler/transform/secret.go
2019-02-10 11:00:16 -08:00

77 lines
2.2 KiB
Go

// Copyright 2019 Drone IO, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package transform
import (
"github.com/drone/drone-runtime/engine"
"github.com/drone/drone-yaml/yaml/compiler/internal/rand"
)
// WithSecrets is a transform function that adds a set
// of global secrets to the container.
func WithSecrets(secrets map[string]string) func(*engine.Spec) {
return func(spec *engine.Spec) {
for key, value := range secrets {
spec.Secrets = append(spec.Secrets,
&engine.Secret{
Metadata: engine.Metadata{
UID: rand.String(),
Name: key,
Namespace: spec.Metadata.Namespace,
},
Data: value,
},
)
}
}
}
// SecretFunc is a callback function used to request
// named secret, required by a pipeline step.
type SecretFunc func(string) *engine.Secret
// WithSecretFunc is a transform function that resolves
// all named secrets through a callback function, and
// adds the secrets to the specification.
func WithSecretFunc(f SecretFunc) func(*engine.Spec) {
return func(spec *engine.Spec) {
// first we get a unique list of all secrets
// used by the specification.
set := map[string]struct{}{}
for _, step := range spec.Steps {
// if we know the step is not going to run,
// we can ignore any secrets that it requires.
if step.RunPolicy == engine.RunNever {
continue
}
for _, v := range step.Secrets {
set[v.Name] = struct{}{}
}
}
// next we use the callback function to
// get the value for each secret, and append
// to the specification.
for name := range set {
secret := f(name)
if secret != nil {
secret.Metadata.UID = rand.String()
secret.Metadata.Namespace = spec.Metadata.Namespace
spec.Secrets = append(spec.Secrets, secret)
}
}
}
}