You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
77 lines
2.3 KiB
Go
77 lines
2.3 KiB
Go
// Copyright 2019 Drone IO, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package transform
|
|
|
|
import (
|
|
"git.awesome-for.me/liuzhiguo/drone-runtime/engine"
|
|
"git.awesome-for.me/liuzhiguo/drone-yaml/yaml/compiler/internal/rand"
|
|
)
|
|
|
|
// WithSecrets is a transform function that adds a set
|
|
// of global secrets to the container.
|
|
func WithSecrets(secrets map[string]string) func(*engine.Spec) {
|
|
return func(spec *engine.Spec) {
|
|
for key, value := range secrets {
|
|
spec.Secrets = append(spec.Secrets,
|
|
&engine.Secret{
|
|
Metadata: engine.Metadata{
|
|
UID: rand.String(),
|
|
Name: key,
|
|
Namespace: spec.Metadata.Namespace,
|
|
},
|
|
Data: value,
|
|
},
|
|
)
|
|
}
|
|
}
|
|
}
|
|
|
|
// SecretFunc is a callback function used to request
|
|
// named secret, required by a pipeline step.
|
|
type SecretFunc func(string) *engine.Secret
|
|
|
|
// WithSecretFunc is a transform function that resolves
|
|
// all named secrets through a callback function, and
|
|
// adds the secrets to the specification.
|
|
func WithSecretFunc(f SecretFunc) func(*engine.Spec) {
|
|
return func(spec *engine.Spec) {
|
|
// first we get a unique list of all secrets
|
|
// used by the specification.
|
|
set := map[string]struct{}{}
|
|
for _, step := range spec.Steps {
|
|
// if we know the step is not going to run,
|
|
// we can ignore any secrets that it requires.
|
|
if step.RunPolicy == engine.RunNever {
|
|
continue
|
|
}
|
|
for _, v := range step.Secrets {
|
|
set[v.Name] = struct{}{}
|
|
}
|
|
}
|
|
|
|
// next we use the callback function to
|
|
// get the value for each secret, and append
|
|
// to the specification.
|
|
for name := range set {
|
|
secret := f(name)
|
|
if secret != nil {
|
|
secret.Metadata.UID = rand.String()
|
|
secret.Metadata.Namespace = spec.Metadata.Namespace
|
|
spec.Secrets = append(spec.Secrets, secret)
|
|
}
|
|
}
|
|
}
|
|
}
|