drone-cli/drone/secret.go

package main

import (
	"fmt"
	"io/ioutil"
	"strings"

	"github.com/codegangsta/cli"
	"github.com/drone/drone-go/drone"
)

var secretCmd = cli.Command{
	Name:  "secret",
	Usage: "manage secrets",
	Subcommands: []cli.Command{
		cli.Command{
			Name:      "add",
			Usage:     "adds a secret",
			ArgsUsage: "[repo] [key] [value]",
			Action:    secretAdd,
			Flags: []cli.Flag{
				cli.StringSliceFlag{
					Name:  "event",
					Usage: "inject the secret for these event types",
					Value: &cli.StringSlice{
						drone.EventPush,
						drone.EventTag,
						drone.EventDeploy,
					},
				},
				cli.StringSliceFlag{
					Name:  "image",
					Usage: "inject the secret for these image types",
					Value: &cli.StringSlice{},
				},
				cli.StringFlag{
					Name:  "input",
					Usage: "input secret value from a file",
				},
			},
		},
		cli.Command{
			Name:   "rm",
			Usage:  "remove a secret",
			Action: secretRemove,
		},
	},
}

// command to add a repository secret.
func secretAdd(c *cli.Context) error {
	repo := c.Args().First()
	owner, name, err := parseRepo(repo)
	if err != nil {
		return err
	}

	tail := c.Args().Tail()
	if len(tail) != 2 {
		cli.ShowSubcommandHelp(c)
		return nil
	}

	secret := &drone.Secret{
		Name:   tail[0],
		Value:  tail[1],
		Images: c.StringSlice("image"),
		Events: c.StringSlice("event"),
	}

	if len(secret.Images) == 0 {
		return fmt.Errorf("Please specify the --image parameter")
	}

	// TODO(bradrydzewski) below we use an @ sybmol to denote that the secret
	// value should be loaded from a file (inspired by curl). I'd prefer to use
	// a --input flag to explicitly specify a filepath instead.

	if strings.HasPrefix(secret.Value, "@") {
		path := secret.Value[1:]
		out, ferr := ioutil.ReadFile(path)
		if ferr != nil {
			return ferr
		}
		secret.Value = string(out)
	}

	client, err := newClient(c)
	if err != nil {
		return err
	}

	return client.SecretPost(owner, name, secret)
}

// command to remove a repository secret.
func secretRemove(c *cli.Context) error {
	repo := c.Args().First()
	owner, name, err := parseRepo(repo)
	if err != nil {
		return err
	}
	secret := c.Args().Get(1)
	client, err := newClient(c)
	if err != nil {
		return err
	}
	return client.SecretDel(owner, name, secret)
}