yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

clan-cli sops: accept bytes

Browse Source
This commit is contained in:
lassulus
2024-03-03 09:18:45 +01:00
parent da34bd7199
commit 11bf0b8b9e
3 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
pkgs/clan-cli/clan_cli/secrets/sops.py
View File

@@ -134,7 +134,7 @@ def update_keys(secret_path: Path, keys: list[str]) -> None:
def encrypt_file(
secret_path: Path, content: IO[str] | str | None, keys: list[str]
secret_path: Path, content: IO[str] | str | bytes | None, keys: list[str]
) -> None:
folder = secret_path.parent
folder.mkdir(parents=True, exist_ok=True)
@@ -157,11 +157,17 @@ def encrypt_file(
# hopefully /tmp is written to an in-memory file to avoid leaking secrets
with NamedTemporaryFile(delete=False) as f:
try:
with open(f.name, "w") as fd:
if isinstance(content, str):
if isinstance(content, str):
with open(f.name, "w") as fd:
fd.write(content)
else:
elif isinstance(content, bytes):
with open(f.name, "wb") as fd:
fd.write(content)
elif isinstance(content, IO):
with open(f.name, "w") as fd:
shutil.copyfileobj(content, fd)
else:
raise ClanError("Invalid content type")
# we pass an empty manifest to pick up existing configuration of the user
args = ["sops", "--config", str(manifest)]
args.extend(["-i", "--encrypt", str(f.name)])