Default to sanitizing newlines in secrets
rodzic
fbbe06d560
commit
4a197bb1bd
|
@ -1,17 +1,19 @@
|
||||||
#!/usr/bin/with-contenv bash
|
#!/usr/bin/with-contenv bash
|
||||||
# shellcheck shell=bash
|
# shellcheck shell=bash
|
||||||
|
|
||||||
if find /run/s6/container_environment/*"FILE__"* -maxdepth 1 > /dev/null 2>&1; then
|
if find /run/s6/container_environment/FILE__* -maxdepth 1 > /dev/null 2>&1; then
|
||||||
for FILENAME in /run/s6/container_environment/*; do
|
for FILENAME in /run/s6/container_environment/FILE__*; do
|
||||||
if [[ "${FILENAME##*/}" == "FILE__"* ]]; then
|
|
||||||
SECRETFILE=$(cat "${FILENAME}")
|
SECRETFILE=$(cat "${FILENAME}")
|
||||||
if [[ -f ${SECRETFILE} ]]; then
|
if [[ -f ${SECRETFILE} ]]; then
|
||||||
FILESTRIP=${FILENAME//FILE__/}
|
FILESTRIP=${FILENAME//FILE__/}
|
||||||
cat "${SECRETFILE}" >"${FILESTRIP}"
|
if [[ ${SECRET_NO_SANITIZE,,} = "true" ]]; then
|
||||||
|
cat "${SECRETFILE}" >"${FILESTRIP}"
|
||||||
|
else
|
||||||
|
tr -d '\n' < "${SECRETFILE}" >"${FILESTRIP}"
|
||||||
|
fi
|
||||||
echo "[env-init] ${FILESTRIP##*/} set from ${FILENAME##*/}"
|
echo "[env-init] ${FILESTRIP##*/} set from ${FILENAME##*/}"
|
||||||
else
|
else
|
||||||
echo "[env-init] cannot find secret in ${FILENAME##*/}"
|
echo "[env-init] cannot find secret in ${FILENAME##*/}"
|
||||||
fi
|
fi
|
||||||
fi
|
|
||||||
done
|
done
|
||||||
fi
|
fi
|
||||||
|
|
Ładowanie…
Reference in New Issue