torjus/nixos-servers
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

vault-fetch: fix multiline secret values being truncated
Some checks failed
Run nix flake check / flake-check (pull_request) Successful in 2m5s
Details
Run nix flake check / flake-check (push) Failing after 16m11s
Details

Browse Source 
The read-based loop split multiline values on newlines, causing only
the first line to be written. Use jq -j to write each key's value
directly to files, preserving multiline content.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Torjus Håkestad
2026-02-05 19:36:51 +01:00
parent ccb1c3fe2e
commit 2c9d86eaf2
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
scripts/vault-fetch/vault-fetch.sh
View File

@@ -137,9 +137,9 @@ fetch_from_vault() {
# Write each secret key to a separate file # Write each secret key to a separate file
log "Writing secrets to $OUTPUT_DIR" log "Writing secrets to $OUTPUT_DIR"
echo "$SECRET_DATA" | jq -r 'to_entries[] | "\(.key)\n\(.value)"' | while read -r key; read -r value; do for key in $(echo "$SECRET_DATA" | jq -r 'keys[]'); do
echo -n "$value" > "$OUTPUT_DIR/$key" echo "$SECRET_DATA" | jq -j --arg k "$key" '.[$k]' > "$OUTPUT_DIR/$key"
echo -n "$value" > "$CACHE_DIR/$key" echo "$SECRET_DATA" | jq -j --arg k "$key" '.[$k]' > "$CACHE_DIR/$key"
chmod 600 "$OUTPUT_DIR/$key" chmod 600 "$OUTPUT_DIR/$key"
chmod 600 "$CACHE_DIR/$key" chmod 600 "$CACHE_DIR/$key"
log " - Wrote secret key: $key" log " - Wrote secret key: $key"