grafana/scripts/vault.star
Javier Palomo 074c07b347
Drone: Retrieve the machine-user from a Vault secret (#35489)
This will remove the need to use a Drone repository secret
2021-06-10 12:22:03 +02:00

26 lines
622 B
Plaintext

pull_secret = 'dockerconfigjson'
github_token = 'github_token'
drone_token = 'drone_token'
def from_secret(secret):
return {
'from_secret': secret
}
def vault_secret(name, path, key):
return {
'kind': 'secret',
'name': name,
'get': {
'path': path,
'name': key,
}
}
def secrets():
return [
vault_secret(pull_secret, 'secret/data/common/gcr', '.dockerconfigjson'),
vault_secret(github_token, 'infra/data/ci/github/grafanabot', 'pat'),
vault_secret(drone_token, 'infra/data/ci/drone', 'machine-user-token'),
]