Skip to content

Commit b13e3ff

Browse files
authored
use vault kv get
1 parent 396bbc4 commit b13e3ff

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

.buildkite/hooks/pre-command

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,16 +50,16 @@ set +x
5050
# Nexus credentials (they cannot use the _SECRET pattern since they are in-memory based)
5151
# See https://docs.gradle.org/current/userguide/signing_plugin.html#sec:in-memory-keys
5252
NEXUS_SECRET=kv/ci-shared/release-eng/team-release-secrets/apm/maven_central
53-
ORG_GRADLE_PROJECT_sonatypeUsername=$(vault read -field username $NEXUS_SECRET)
53+
ORG_GRADLE_PROJECT_sonatypeUsername=$(vault kv get --field="username" $NEXUS_SECRET)
5454
export ORG_GRADLE_PROJECT_sonatypeUsername
55-
ORG_GRADLE_PROJECT_sonatypePassword=$(vault read -field password $NEXUS_SECRET)
55+
ORG_GRADLE_PROJECT_sonatypePassword=$(vault kv get --field="password" $NEXUS_SECRET)
5656
export ORG_GRADLE_PROJECT_sonatypePassword
5757

5858
# Signing keys
5959
GPG_SECRET=kv/data/ci-shared/release-eng/team-release-secrets/apm/gpg
6060
vault read -field="keyring" $GPG_SECRET | base64 -d > $KEY_FILE
6161
## NOTE: passphase is the name of the field.
62-
KEYPASS_SECRET=$(vault read -field="passphase" $GPG_SECRET)
62+
KEYPASS_SECRET=$(vault kv get --field="passphase" $GPG_SECRET)
6363
export KEYPASS_SECRET
6464
KEY_ID=$(vault kv get --field="key_id" $GPG_SECRET)
6565
KEY_ID_SECRET=${KEY_ID: -8}

0 commit comments

Comments
 (0)