cloudbuild.yaml

# Copyright 2019 The Berglas Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

steps:
- id: berglas
  name: gcr.io/berglas/berglas
  env:
  - API_KEY=berglas://${_BUCKET_ID}/api-key?destination=/secrets/api-key
  - TLS_KEY=berglas://${_BUCKET_ID}/tls-key?destination=/secrets/tls-key
  args: ["exec", "--", "/bin/sh"]
  volumes:
  - name: secrets
    path: /secrets

- id: show-api-key
  name: launcher.gcr.io/google/ubuntu16_04
  entrypoint: "/bin/cat"
  args: ["/secrets/api-key"]
  volumes:
  - name: secrets
    path: /secrets

- id: show-tls-key
  name: launcher.gcr.io/google/ubuntu16_04
  entrypoint: "/bin/cat"
  args: ["/secrets/tls-key"]
  volumes:
  - name: secrets
    path: /secrets