Skip to content

feat: deliver secrets as env vars instead of inlining in YAML #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TerrifiedBug merged 7 commits into from
Mar 7, 2026
Merged

feat: deliver secrets as env vars instead of inlining in YAML #25

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
bcec861
feat: add convertSecretRefsToEnvVars for env var interpolation
TerrifiedBug Mar 6, 2026
733ed54
feat: use env var placeholders instead of inlining secrets in YAML
TerrifiedBug Mar 6, 2026
6bc5a8e
fix: normalize secret names to valid env var format
TerrifiedBug Mar 6, 2026
142fc87
fix: include secrets in checksum and warn on name collisions
TerrifiedBug Mar 6, 2026
8fae4a1
fix: hoist secrets query outside pipeline loop and add deterministic …
TerrifiedBug Mar 6, 2026
01d7472
fix: force-quote YAML strings to avoid flow indicator parse errors
TerrifiedBug Mar 6, 2026
3337c08
Merge branch 'main' into feat/env-var-secret-delivery
TerrifiedBug Mar 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/app/api/agent/config/route.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@ export async function GET(request: Request) {
certFiles = certs;

// Re-dump to YAML with proper quoting for special characters
configYaml = yaml.dump(withCerts, { indent: 2, lineWidth: -1, noRefs: true });
configYaml = yaml.dump(withCerts, { indent: 2, lineWidth: -1, noRefs: true, forceQuotes: true, quotingType: '"' });
}
// External backend: configYaml is used as-is with references intact

Expand Down
Loading