Skip to content

feat: Add the new migrate vault-secrets subcommand.

Florian Forsterrequested to merge
fforster/migrate-vault into main

feat: Add the new migrate vault-secrets subcommand.

This subcommand allows migrating and syncing secrets from the Cloud Run style definition (multiple uppercase secrets, each with a value key) to the Kubernetes style (single env-vars secret, each key is an environment variable).

Available flags:

  • --environment / -e – sets the deploy environment (staging, production). Defaults to staging.
  • --dry-run – when enabled, no writes will be performed and a summary of the skipped action is printed instead.
  • --authoritative – when enabled, environment variables existing in the Kubernetes service but not the Cloud Run service will be removed. Default behavior is to merge the secret keys.
Edited by Florian Forster

Merge request reports