Secrets #2

coffee-cup · 2025-01-29T06:04:24Z

Use native buildkit secret mounting for passing secrets into the build (https://docs.docker.com/build/building/secrets/#target)
Add "secrets" as part of config and plan schemas
Compute secret value hash to invalidate exec commands when the values of secrets change
Tests for config merging, context applying, a few other things
Generic struct merging via reflection for configs
Bun script to make building with the custom frontend easier

linear · 2025-01-29T06:04:27Z

How should railpack use secrets? How does it translate to LLB?

coffee-cup added 11 commits January 28, 2025 17:35

support buildkit secrets when using build command

d43162c

merge function that can finally handle the config

83fe208

tests passing

f038692

merging cleaned up

9fedb91

test applying config and generating plan from context

04b7aad

add snapshot testing

0e38b22

sort packages names when displaying custom name for step

10863c6

update frontend Dockerfile name

1aa6eb0

invalidate layer cache when secrets change

0474fbc

fix run-with-frontend script and properly invalidate secrets with hash

01c370f

non-command step builders don't use secrets

c64519e

coffee-cup added 3 commits January 29, 2025 01:08

cleanup and update snapshots

d3ebc13

some cleanup

a906ab2

fix tests

7ef9875

coffee-cup merged commit 434406c into main Jan 29, 2025
1 check passed

coffee-cup deleted the jr/pro-3683-secret-and-variables branch February 6, 2025 20:13

Provide feedback