Lin Yinfeng 01543e789c nixos/utils: support JSON secret files in genJqSecretsReplacementSnippet ...

genJqReplacementSnippet quotes the content of the secret file in the
output json file, which prevents structured secret, such as a list or
an object, from being used.

This commit adds a `quote = true|false` option to the `{ _secret =
"/path/to/secret"; }` attribute set. `quote = true` treats the
content of /path/to/secret as string, while `quote = false` treats
the content of /path/to/secret as a JSON document.

`quote = true` is the default, maintaining backward compatibility.

2024-07-07 19:22:10 +08:00

12 KiB

Raw Blame History

View Raw