Declaring a secret as an environement variable

[yacinelazaar]

Hi,

I'm trying to figure out how to load a password from the bundled file secret plugin from gocd into the yaml but so far no success.
Here is my approach:

environments:
  production:
    environment_variables:
      GIT_USER: yacine.laz
      GIT_PASSWORD: {{SECRET:[ci][git-password]}}
      REGISTRY_USER: yacine.laz
      REGISTRY_PASSWORD: "{{SECRET:[ci][registry-password]}}"
      REGISTRY: http://gitlab-registry
      REGISTRY_IMAGE: gitlab-registry.thinkpad.tld/yacine.laz/presentation-gitlab-k8s
    pipelines:
      - my-pipeline
pipelines:
  my-pipeline: # definition pipeline
    group: pipeline-group
    label_template: "${mygit[:8]}"
    locking: off
    materials:
      mygit:
        git: http://gitlab/yacine.laz/gocd-repo-test.git
        branch: master
        username: ${GIT_USER}
        password: ${GIT_PASSWORD}
...

According to gocd docs, I can reference the secret as an env variable or a parameter but I'm getting an error:

Error: pipeline.gocd.yml;
1. Line 5, column 19: Expected scalar, sequence, or mapping but found: mapping end

Does it need escaping or this simply does not work. If the latter, then what's the appropriate method to use password and secrets in the yml and be able to reference them.

[arvindsv]

Based on this message, I believe this is not an issue. Is that right?

[yacinelazaar]

@arvindsv
Yes Indeed, Damn the single quotes:
Would help if there was an example for those in the docs.

environments:
  production:
    environment_variables:
      REGISTRY_USER: yacine.laz
      REGISTRY_PASSWORD: '{{SECRET:[ci][registry-password]}}'

[arvindsv]

I don't have access to accept it, but I'm sure a PR to the docs will be accepted. :)

[yacinelazaar]

I will make some time for it in the weekend.

[dnewhook]

I got stung with referencing secrets in git materials today. Based on the example above - this was how we solved the issue... (GOCD 20.4.0.

environments:
  production:
    environment_variables:
      GIT_USER: yacine.laz
      REGISTRY_USER: yacine.laz
      REGISTRY_PASSWORD: '{{SECRET:[ci][registry-password]}}'
      REGISTRY: http://gitlab-registry
      REGISTRY_IMAGE: gitlab-registry.thinkpad.tld/yacine.laz/presentation-gitlab-k8s
    pipelines:
      - my-pipeline
pipelines:
  my-pipeline: # definition pipeline
    group: pipeline-group
    label_template: "${mygit[:8]}"
    locking: off
    materials:
      mygit:
        git: http://gitlab/yacine.laz/gocd-repo-test.git
        branch: master
        username: ${GIT_USER}
        password: "{{SECRET:[ci][git-password]}}"