01aab8baa3
Signed-off-by: Evan Hazlett <ejhazlett@gmail.com>
use secret store interface instead of embedded secret data into container
Signed-off-by: Evan Hazlett <ejhazlett@gmail.com>
(cherry picked from commit bebd472e40)
Signed-off-by: Victor Vieux <victorvieux@gmail.com>
36 lines
848 B
Go
36 lines
848 B
Go
package daemon
|
|
|
|
import (
|
|
"github.com/Sirupsen/logrus"
|
|
swarmtypes "github.com/docker/docker/api/types/swarm"
|
|
"github.com/docker/swarmkit/agent/exec"
|
|
)
|
|
|
|
// SetContainerSecretStore sets the secret store backend for the container
|
|
func (daemon *Daemon) SetContainerSecretStore(name string, store exec.SecretGetter) error {
|
|
c, err := daemon.GetContainer(name)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
c.SecretStore = store
|
|
|
|
return nil
|
|
}
|
|
|
|
// SetContainerSecretReferences sets the container secret references needed
|
|
func (daemon *Daemon) SetContainerSecretReferences(name string, refs []*swarmtypes.SecretReference) error {
|
|
if !secretsSupported() && len(refs) > 0 {
|
|
logrus.Warn("secrets are not supported on this platform")
|
|
return nil
|
|
}
|
|
|
|
c, err := daemon.GetContainer(name)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
c.SecretReferences = refs
|
|
|
|
return nil
|
|
}
|