Skip to content

Commit 3097fea

Browse files
committed
pipeline(kubernetes): fix local secret scan
Use a valid name as input for tasks
1 parent 28121ee commit 3097fea

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

concourse/pipelines/shared/kubernetes-pipeline.yml.erb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -263,7 +263,7 @@ jobs:
263263
- task: generate-<%= name %>-manifest
264264
input_mapping:
265265
scripts-resource: cf-ops-automation
266-
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{name}", "secrets-full-writer") %>
266+
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{root_deployment_name}-#{name}", "secrets-full-writer") %>
267267
additional-resource: paas-templates-full
268268
output_mapping: {generated-files: pre-processed-manifest}
269269
file: cf-ops-automation/concourse/tasks/generate_manifest/task.yml
@@ -292,7 +292,7 @@ jobs:
292292
- task: execute-pre-deploy-shell
293293
input_mapping:
294294
paas-templates-resource: paas-templates-resolved
295-
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{name}", "secrets-full-writer") %>
295+
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{root_deployment_name}-#{name}", "secrets-full-writer") %>
296296
output_mapping: {result-dir: ignored-k8s-repo-pre-deploy}
297297
file: cf-ops-automation/concourse/tasks/execute_k8s_shells/task.yml
298298
params:
@@ -308,7 +308,7 @@ jobs:
308308
- task: execute-shell
309309
input_mapping:
310310
paas-templates-resource: paas-templates-resolved
311-
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{name}", "secrets-full-writer") %>
311+
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{root_deployment_name}-#{name}", "secrets-full-writer") %>
312312
output_mapping: {result-dir: updated-k8s-repo}
313313
file: cf-ops-automation/concourse/tasks/execute_k8s_shells/task.yml
314314
params:
@@ -330,7 +330,7 @@ jobs:
330330
- task: execute-post-deploy-shell
331331
input_mapping:
332332
paas-templates-resource: paas-templates-resolved
333-
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{name}", "secrets-full-writer") %>
333+
credentials-resource: <%= deployment_details.select_secrets_scan_repository("secrets-#{root_deployment_name}-#{name}", "secrets-full-writer") %>
334334
k8s-configs-repository: updated-k8s-repo
335335
output_mapping: {result-dir: ignored-k8s-repo-post-deploy}
336336
file: cf-ops-automation/concourse/tasks/execute_k8s_shells/task.yml

0 commit comments

Comments
 (0)