wooga / atlas-build-unity
85%
master: 78%

LAST BUILD BRANCH: PR-154
DEFAULT BRANCH: master
Repo Added
Files 71
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH PR-58
branch: PR-58
CHANGE BRANCH
x

15

push

jenkins

Add secrets resolver base setup

Description
===========

This is a pretty huge patch and implements the basic tools needed to
fetch and pass secrets to Unity. The patch [#105] is introducing a new
configuration field called `secrets` to the `AppConfig`. The fields
intention is to declare all secretIds needed byt the `AppConfig`.
This patch implements the basic workflow to read the secretsIds, fetch
the secrets through a `SecretResolver` and pass them to Unity via
environment variables (this is the plan for the first implementation).

FetchSecrets
------------

I added a new task type `FetchSecrets` and configured tasks for all
found `AppConfig` files in the `AppConfig` lookup directory. This means
every `UnityBuildPlayerTask` generated from the plugin will have a
corresponding `FetchSecrets` task as a direct dependency. (I might
change this setup so any task of `UnityBuildPlayerTask` gets a fetch
secret task assigned)

The `FetchSecrets` task will read the list of configured secrets in the
`AppConfig` and pass them to a configured resolver of type
`SecretResolver`. There is no default implementation available at the
moment. Only the integration tests provide some mock resolvers. If no
resolver is set or no secret ids are configured the task will create an
empty output.

The output of the `FetchSecrets` file is a serialized yaml version of
an object the new helper class type `Secrets`. This class handles
unencrypted secrets and encrypts them before serializing to disk.

e.g.

```yml
!secrets
secrets:
  net.wooga.testCredential: !encryptedSecretText
    secretValue: xllADGqYIK5h3go11IMfx8Iv0eH6UHhukv9sH6VrO4bggTXU+54HUhjR/29Bojvq
  net.wooga.testCredential2: !encryptedSecretText
    secretValue: AZ5nk3W6sogqFz/w82iZkA4pcGHKEmZpWbM7Cvgd+xsJCtEL6sTP+UGtUDaDh0dt
  net.wooga.testCredential3: !encryptedSecretFile
    secretValue: !!binary |-
      o+nF/o+R7jTy9q5aLfUsJ0WjXVl5hwVuykjr/G9zJVtweA7e+c/1HEjkR4f3988x
  net.wooga.testCredential4: !encryptedSecretT... (continued)

987 of 1167 relevant lines covered (84.58%)

1.83 hits per line

Relevant lines Covered
1167 RELEVANT LINES 987 COVERED LINES
1.83 HITS PER LINE
Source Files on PR-58

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
15 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
14 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
13 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
12 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
11 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
10 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
9 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
8 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
7 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
6 PR-58 Add secrets resolver base setup Description =========== This is a pretty huge patch and implements the basic tools needed to fetch and pass secrets to Unity. The patch [#105] is introducing a new configuration field called `secrets` to the `AppC... push jenkins pending completion  
See All Builds (473)