Prune deactivated secrets

appuio · Oct 1, 2021 · 96cf8af · 96cf8af
1 parent 621832a
commit 96cf8af
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/component/secrets.jsonnet b/component/secrets.jsonnet
@@ -34,7 +34,7 @@ local secrets = [
     },
     stringData: params.secrets[secretName],
   })
-  for secretName in std.objectFields(params.secrets)
+  for secretName in std.objectFields(std.prune(params.secrets))
 ] + legacySecrets;
 
 

diff --git a/tests/defaults.yml b/tests/defaults.yml
@@ -14,6 +14,7 @@ parameters:
         users: {}
 
     secrets:
+      ignoredSecret: null
       oidc-client:
         clientSecret: '?{vaultkv:${cluster:tenant}/${cluster:name}/keycloak-auth/clientSecret}'
       # this is the secret name in case if `bindPassword.name` is used: