Passing availableSecrets and secretEnv to kaniko in GCB

[dimovnike]

When building with GCB directly we can instrruct GCB to mount a secret in the kaniko pod. This is achieved by using availableSecrets and secretEnv keys in yaml. Is there a way to pass these directly from skaffold?

below is an example of an buildconfig.yaml:

steps:
- name: 'gcr.io/kaniko/kaniko-executor:latest'
  args:
  - --destination=...
  secretEnv: ['SSH_PRIVATE_KEY']
availableSecrets:
  secretManager:
  - versionName: projects/$PROJECT_ID/secrets/private-key-secret-name/versions/latest
    env: 'SSH_PRIVATE_KEY'

[nkubala]

@dimovnike this isn't currently possible in skaffold as we don't expose that field from the cloudbuild.yaml into the skaffold.yaml GCB schema, but it could be added.

[lukepon]

is there any progress on this?

[aaron-prindle]

I have attempted to fix this by adding an availableSecrets field to Skaffold that is passed through to the gcb builder in this in the PR here:
#8307

I will update the thread here with the PR's status