Router0/infisical-cli-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use infisical cli directly, if available

Browse Source
This commit is contained in:
Aleksandar Puharic
2025-06-01 23:35:31 +02:00
parent 489b3dcf62
commit 19fd9f4d83
1 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
dist/scripts/src/fetch-secrets.sh vendored
View File

@@ -5,9 +5,14 @@ fetch_secret() {
local env="${2:?Environment is required}" local env="${2:?Environment is required}"
local output_file="${3:?}" local output_file="${3:?}"
script -q /dev/null \ if command -v infisical &>/dev/null; then
-c "docker compose run --rm -t cli infisical secrets --plain get ""${target_secret}"" --env ""${env}""" \ # If infisical CLI command is available, use it directly
>"${output_file}" infisical secrets --plain get "${target_secret}" --env "${env}" >"${output_file}"
else
script -q /dev/null \
-c "docker compose run --rm -t cli infisical secrets --plain get ""${target_secret}"" --env ""${env}""" \
>"${output_file}"
fi
# Check if file is empty # Check if file is empty
if [[ ! -s ${output_file} ]]; then if [[ ! -s ${output_file} ]]; then
@@ -19,12 +24,12 @@ main() {
local config_file="${1:-./secrets.json}" local config_file="${1:-./secrets.json}"
local secrets_dir="${2:-./secrets}" local secrets_dir="${2:-./secrets}"
if ! command -v jq &> /dev/null; then if ! command -v jq &>/dev/null; then
printf "Error: jq is required but not installed\n" >&2 printf "Error: jq is required but not installed\n" >&2
return 1 return 1
fi fi
if [[ ! -f "${config_file}" ]]; then if [[ ! -f ${config_file} ]]; then
printf "Error: Config file %s not found\n" "${config_file}" >&2 printf "Error: Config file %s not found\n" "${config_file}" >&2
return 1 return 1
fi fi
@@ -45,11 +50,11 @@ main() {
output_file="${secrets_dir}/${output_file}" output_file="${secrets_dir}/${output_file}"
# If filename is specified in json, use it; otherwise, use the local_secret as the filename # If filename is specified in json, use it; otherwise, use the local_secret as the filename
if [[ -n "${filename}" && "${filename}" != "null" ]]; then if [[ -n ${filename} && ${filename} != "null" ]]; then
output_file="${secrets_dir}/${filename}" output_file="${secrets_dir}/${filename}"
fi fi
if [[ -z "${env}" ]]; then if [[ -z ${env} ]]; then
printf "Warning: Environment not specified for secret %s, assuming 'prod'\n" "${local_secret}" >&2 printf "Warning: Environment not specified for secret %s, assuming 'prod'\n" "${local_secret}" >&2
fi fi