kube_cluster 0.17.1 → 0.18.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 928086733f7475611aa69193643f88719d926b70bb4aa3ed9d8a1c8f27efdec7
-  data.tar.gz: 3cc456aa515c6ca51fd87f26d35b2fcc740d984f8d907385a9f4b46bfc273a1c
+  metadata.gz: 3cd66af1d3d09305e45ea32c0eef681e1d46c5d18d75b4afdb2cca0d9426e21e
+  data.tar.gz: 9ad4f37dc3c7a55a6dc4a07841f860503bbcf31c163393b234d69cfbcef17c41
 SHA512:
-  metadata.gz: 9fb588b0b214cad46930473827384993fb0577d9997ae1a60a2a5e808eb23a792697d95e877d31e959661322b7adf1c2c31ecaf41cc7a910e132ad728f31bab4
-  data.tar.gz: 240eb7a87911cb284cd6fc2526608f843dadfee100f25b7b9611e6a27531d440604ae9c7b1d8586b26b5b926292c01f98ffd97e64c51659c0bad983629322e41
+  metadata.gz: fac17bb8169f4cd4262f17a364e081fe20681a1789fb7e4a0a709ad0255da03cbb9c34b64f8228dc07acf14872c379d9465839d5a22324b59bbda82e9d382c78
+  data.tar.gz: a6fb81dd871c504e9d49103f952e93f7f46951ee5f8691384496452bd584fc8ae24a0f56e6174021719f857ee05a4b7c2a2ce74bae66d04faaad010cd736e857

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    kube_cluster (0.17.1)
+    kube_cluster (0.18.0)
       activesupport (~> 8.0)
       kube_kubectl (~> 2.0)
       kube_schema (~> 1.7)

data/lib/kube/cluster/standard/env_processing.rb

@@ -17,6 +17,11 @@ module Kube
         #   "FOO" => secret.template("{{ .bar }}")
         #     =>  { name: "FOO", valueFrom: { secretKeyRef: { name: "secret-name", key: "FOO" } } }
         #
+        # Secret::KeyRef values reference an existing secret's key directly
+        # (the same Secret.new(name:).key(...) form used by volume_mounts):
+        #   "FOO" => Secret.new(name: "creds").key("bar")
+        #     =>  { name: "FOO", valueFrom: { secretKeyRef: { name: "creds", key: "bar" } } }
+        #
         def self.process(env)
           return env if env.is_a?(Array)
           return [] if env.nil?
@@ -24,9 +29,12 @@ module Kube
           env.map do |key, value|
             key = key.to_s
 
-            if value.is_a?(ESO::ExternalSecret::TemplateRef)
+            case value
+            when ESO::ExternalSecret::TemplateRef
               value.secret.register_template!(key, value.template_value)
               { name: key, valueFrom: { secretKeyRef: { name: value.secret.secret_name, key: key } } }
+            when Kube::Cluster::Standard::Secret::KeyRef
+              { name: key, valueFrom: { secretKeyRef: { name: value.secret.secret_name, key: value.key_name } } }
             else
               { name: key, value: value.to_s }
             end
@@ -38,5 +46,21 @@ module Kube
 end
 
 test do
-  # no op
+  describe "EnvProcessing" do
+    it "maps a Secret::KeyRef to a secretKeyRef env var" do
+      secret = Kube::Cluster::Standard::Secret.new(name: "passbolt-db-creds")
+
+      Kube::Cluster::Standard::EnvProcessing
+        .process("DB_PASSWORD" => secret.key("password"))
+        .should == [
+          { name: "DB_PASSWORD", valueFrom: { secretKeyRef: { name: "passbolt-db-creds", key: "password" } } }
+        ]
+    end
+
+    it "still maps plain string values to value env vars" do
+      Kube::Cluster::Standard::EnvProcessing
+        .process("FOO" => "bar")
+        .should == [{ name: "FOO", value: "bar" }]
+    end
+  end
 end

data/lib/kube/cluster/version.rb

@@ -2,6 +2,6 @@
 
 module Kube
   module Cluster
-    VERSION = "0.17.1"
+    VERSION = "0.18.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kube_cluster
 version: !ruby/object:Gem::Version
-  version: 0.17.1
+  version: 0.18.0
 platform: ruby
 authors:
 - Nathan K