Maintaining build secrets in a build container
AssigneeRed Hat, Inc.
InventorsMichal Fojtik, Vyacheslav Semushin
Life of this patent
Estimating the term…
Abstract
Implementations provide for a container-based architecture that can maintain build secrets. A method of the disclosure includes storing a file in a destination directory of a build container. The file includes authentication data to retrieve information from a repository. A build of an application image is initiated at a build container. The application image is built using the information retrieved from the repository via the loaded file. In response to receiving an indication that the build of the application imaged is complete, the loaded file is truncated.
Claims20
A method comprising:
- storing, by a processing device, a file in a destination directory of a build container, the file comprising authentication data to retrieve information from a repository;
- initiating, by the processing device, a build of an application image at the build container;
- building, by the processing device via the build container, the application image for an application using the information retrieved from the repository via the stored file;
- and
- in response to receiving an indication that the build of the application image is complete, truncating, by the processing device, the stored file.
A system comprising:
- a memory;
- and
- a processing device of a container-based system, the processing device communicably coupled to the memory, the processing device to:
- store a file to build an application image for an application of the container-based system in a destination directory of a build container;
- initiate a build of the application image at the build container;
- provide authentication credentials extracted from the stored file to access a repository;
- retrieve information from the repository;
- build the application image in view of source code of the application generated using the information retrieved from the repository;
- and
- truncate the stored file at completion of the build of the application image.
A non-transitory machine-readable storage medium including instructions that, when accessed by a processing device, cause the processing device to:
- store, by the processing device, a file comprising data to access a repository in a destination directory of a build container;
- initiate, by the processing device, a build of an application image at the build container;
- build, by the processing device, the application image using information retrieved from the repository via the stored file;
- receive, by the processing device, an indication that the build of the application image is complete;
- and
- truncate, by the processing device, the stored file such that contents of the stored file are removed.
Dependencies are inferred from the claim text.