Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: bundle secret management API client #55

Merged
merged 1 commit into from
Mar 3, 2025

Conversation

joe0BAB
Copy link
Contributor

@joe0BAB joe0BAB commented Mar 3, 2025

No description provided.

Value string
}

func AddSecret(ctx context.Context) *cobra.Command {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be good enough for the start. Just run host-binary add --name <secret-name> --value <secret-value>. (you can adjust to your needs later if you want)

}

func assertMcpPolicyExists(ctx context.Context, apiClient client.ApiClient) error {
return apiClient.SetPolicy(ctx, secretsapi.Policy{Name: mcpPolicyName, Images: []string{"*"}})
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Every time we add a secret, we assure the MCP policy exists and is set to * so any image can consume the secrets.

@@ -18,7 +25,7 @@ update-extension: build-extension ## Update the extension
prepare-buildx: ## Create buildx builder for multi-arch build, if not exists
docker buildx inspect $(BUILDER) || docker buildx create --name=$(BUILDER) --driver=docker-container --driver-opt=network=host

push-extension: prepare-buildx ## Build & Upload extension image to hub. Do not push if tag already exists: make push-extension tag=0.1
push-extension: prepare-buildx cross ## Build & Upload extension image to hub. Do not push if tag already exists: make push-extension tag=0.1
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The host-binary dir has its own Makefile. Hooking in the cross target here should be enough to next time ship an extension with the client host binary.

@ColinMcNeil ColinMcNeil merged commit 69e224e into docker:main Mar 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants