Kevin Stiehl
a48b8afc31
fix(commonPipelineEnvironment): keep json numbers untouched ( #2908 )
...
* keep numbers untouched
* rebase master
2021-06-23 20:20:43 +02:00
Kevin Stiehl
c0ae0df2f0
unset umask ( #2927 )
2021-06-21 09:45:10 +02:00
Kevin Stiehl
49dfc1f422
fix(pipelineEnv): use env instead of heredoc ( #2923 )
2021-06-18 11:00:59 +02:00
Kevin Stiehl
792d435a7f
fix(commonPipelineEnvironment) file and directory permissions ( #2924 )
2021-06-18 09:56:31 +02:00
Kevin Stiehl and Christopher Fenner
29b991d6fc
feat(commonPipelineEnv): consume pipeline environment from env variable if set ( #2919 )
...
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2021-06-17 16:54:57 +02:00
Kevin Stiehl and Oliver Nocon
80974ea930
update docker image ( #2918 )
...
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2021-06-17 16:19:39 +02:00
Kevin Stiehl
a03be973bc
fix(cpe): add more null checks ( #2913 )
2021-06-16 18:04:37 +02:00
Kevin Stiehl
ff507b959e
pin kaniko version to v1.3.0-debug (latest working version) ( #2911 )
2021-06-16 16:37:39 +02:00
Kevin Stiehl
173e887064
[CPE] Missing pipeline environment in sonar docker container ( #2909 )
...
* execute writepipeline env in sonar
* non exisitng dir is no error
* add log message
2021-06-16 11:46:55 +02:00
Kevin Stiehl
eb6ffc334a
[CPE] write commonPipelineEnvironment even when it's empty ( #2904 )
...
* writePipelineEnv even when map is empty
* mock write and read PipelineEnv calls
2021-06-15 18:42:04 +02:00
Kevin Stiehl and Christopher Fenner
d1c8abc6b3
refactor: move common pipeline environment handling to golang ( #2823 )
...
* make use of new read,writePipelineEnv Steps in groovy
* remove unused cat
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2021-06-15 14:34:56 +02:00
Kevin Stiehl
1079aaba53
ci(release): remove unused copies and name downloads correctly ( #2897 )
2021-06-15 14:04:38 +02:00
Kevin Stiehl and Christopher Fenner
6c7814e4d5
feat(cpm): Add read and write CPE Go step ( #2888 )
...
* add read write cpe go steps
* Update pkg/piperenv/CPEMap.go
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
* Update pkg/piperenv/CPEMap.go
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
* Update pkg/piperenv/environment.go
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
* Apply suggestions from code review
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
* rename file
* add error handling
* add error handling
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2021-06-11 16:17:40 +02:00
Kevin Stiehl and Oliver Nocon
fe6ea643fa
Add terraformExecuteStep ( #2679 )
...
* Add terraformExectueStep
* Update terraformExecute.go
* fmt
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2021-03-29 16:22:23 +02:00
Kevin Stiehl and Christopher Fenner
b70af2651e
Fix config rsolving in PostStage ( #2726 )
...
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2021-03-29 12:18:19 +02:00
Kevin Stiehl and Oliver Nocon
f2b0683880
add token revocation ( #2686 )
...
* add token revocation
* update mocks
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2021-03-10 08:36:50 +01:00
Kevin Stiehl and lndrschlz
649b6d6201
[Vault] Fix ContextParamFilters for vaultSecretFile ( #2671 )
...
* fix contextFilter
Co-authored-by: lndrschlz <leander.schulz01@sap.com >
* reduce Congitive Complexity warning
Co-authored-by: lndrschlz <leander.schulz01@sap.com >
2021-03-08 10:16:32 +01:00
Kevin Stiehl and Christopher Fenner
ffffe8295e
(Vault) Improvements ( #2439 )
...
* vault improvements
* Update cloudFoundryDeploy.yaml
remove double PARAMETERS
* go generate
* fix type & resturcutre paragraph to a list
* remove non-existent secrets
* build trigger
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2021-02-15 09:48:51 +01:00
Kevin Stiehl
9ad0dec224
add access_token alias to all gh secrets ( #2543 )
2021-01-27 12:58:47 +01:00
Kevin Stiehl
4a92d1a96a
[Vault] Mixin Vault Parameters for default config ( #2523 )
...
* load vault filters for custom defaults
* add tests
2021-01-20 14:59:47 +01:00
Kevin Stiehl
7d275b3ec3
fix(cloudfoundry): fetch credentials from vault ( #2444 )
2020-12-03 18:30:32 +01:00
Kevin Stiehl
e2335b7181
(documentation) fix documentation render bug ( #2423 )
...
* fix documentation render bug
* fix tests
* fix complexity
2020-11-26 07:51:43 +01:00
Kevin Stiehl and Oliver Nocon
dfab156427
Feature/approle secret id rotation ( #2311 )
...
* add new step vault secret
* add debug log
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-17 13:49:31 +01:00
9cb605ba60
[Documentation ]fix checkmarx docs ( #2372 )
...
* fix checkmarx docs
* go generate
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-16 13:03:31 +01:00
Kevin Stiehl and Oliver Nocon
6c51b76fcf
(documentation) Vault Setup documentation ( #2366 )
...
* add vault documentation
* fix test
* fix typo
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-16 11:53:52 +01:00
Kevin Stiehl and Oliver Nocon
9df9ec8ca4
(kubernetesDeploy) allow to keep a failed deployment ( #2338 )
...
* new 'keepFailedDeployments' parameter which removes the --atomic flag
* Update resources/metadata/kubernetesdeploy.yaml
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
* go generate
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-10 15:43:19 +01:00
Kevin Stiehl and Oliver Nocon
0f48a229d2
(Vault) add vaultSecretFile References ( #2314 )
...
* add vaultSecretFile References
* add vaultRef to protecode
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-06 18:06:19 +01:00
Kevin Stiehl
9d461c6753
consider alias during secret resolving ( #2327 )
2020-11-06 17:54:01 +01:00
Kevin Stiehl
67727147f8
switch to debug logging for some vault log messages ( #2299 )
2020-11-03 08:45:12 +01:00
Kevin Stiehl and Oliver Nocon
ea5e91672d
mask secret also when they are url encoded ( #2289 )
...
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-02 10:08:34 +01:00
Kevin Stiehl and Oliver Nocon
ff7204fcdf
fetch github token from vault ( #2290 )
...
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-11-02 09:04:36 +01:00
Kevin Stiehl and lndrschlz
72dd34d910
rename versioning credential to "gitHttpsCredential" ( #2185 )
...
* rename versioning credential to "gitHttpsCredential"
* renmae secret to gitHttpsCredential
Co-authored-by: lndrschlz <leander.schulz01@sap.com >
2020-10-26 15:55:37 +01:00
Kevin Stiehl and Christopher Fenner
24aafb0b69
add vaultSecretFileReferences ( #2203 )
...
* add vaultSecretFileReferences
* fix test
* fix test
* go generate
* remove code duplication
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2020-10-26 14:20:04 +01:00
3eae0c5f68
feat(vault): fetch secrets from vault ( #2032 )
...
* cloud-foundry & sonar from vault
* add vault development hint
* don't abort on vault errors
* cloudfoundry make credentialsId only mandatory when vault is not configured
* add vault ref to step ymls
* rename vaultAddress to vaultServerUrl
* rename PIPER_vaultRole* to PIPER_vaultAppRole*
* add resourceRef for detect step
* fix error when no namespace is set
* added debug logs
* added debug logs
* fix vault resolving
* add vaultCustomBasePath
* rename vault_test.go to client_test.go
* refactored vault logging
* refactored config param lookup for vault
* added tüddelchen
* rename vaultCustomBasePath to vaultPath
* fix tests
* change lookup path for group secrets
* fix interpolation tests
* added vault resource ref to versioning
* execute go generate
* rename Approle to AppRole
* change verbose back to false
Co-authored-by: Leander Schulz <leander.schulz01@sap.com >
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com >
2020-10-13 14:14:47 +02:00
Kevin Stiehl and Oliver Nocon
d589038206
Vault AppRole login ( #1971 )
...
* added interpolation package in config
* vault allow paths to hold config references
* allow referencing properties in vaultPaths
* fix small typo
* add approleAuth
* register resolved secrets to logger
* generate steps
* clean up
* add integration test
* add vault to context filter
* reduce Cognitive Complexity & added tests
* Update pkg/config/stepmeta_test.go
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
* go generate
* go generate after merge
* rename VaultAppRole* to VaultRole*
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-09-16 14:50:09 +02:00
Kevin Stiehl and Oliver Nocon
116a91ce28
Fetch config parameters from vault ( #1782 )
...
* added secret fetching from vault
* added rootPath and vault namespaces
* write tests for vault config loading
* fix smaller bugs
* rename rootPath to basePath
* fix integration test
* make basePath optional
* write more tests
* remove unnecessary code
* make basePath configurable
* remove mixin for vault
* rewrite tests
* fix tests for searching over multiple paths
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com >
2020-07-22 11:15:48 +02:00
Kevin Stiehl
