You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
94 lines
3.0 KiB
Bash
94 lines
3.0 KiB
Bash
3 years ago
|
#!/usr/bin/env bash
|
||
|
|
# vim:ts=4:sts=4:sw=4:et
|
||
|
|
#
|
||
|
|
# Author: Hari Sekhon
|
||
|
|
# Date: 2021-12-03 17:41:23 +0000 (Fri, 03 Dec 2021)
|
||
|
|
#
|
||
|
|
# https://github.com/HariSekhon/bash-tools
|
||
|
|
#
|
||
|
|
# License: see accompanying Hari Sekhon LICENSE file
|
||
|
|
#
|
||
|
|
# If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
|
||
|
|
#
|
||
|
|
# https://www.linkedin.com/in/HariSekhon
|
||
|
|
#
|
||
|
|
|
||
|
|
# https://docs.bitbucket.com/ee/api/pipeline_level_variables.html
|
||
|
|
|
||
|
|
set -euo pipefail
|
||
|
|
[ -n "${DEBUG:-}" ] && set -x
|
||
|
|
srcdir="$(dirname "${BASH_SOURCE[0]}")"
|
||
|
|
|
||
|
|
# shellcheck disable=SC1090
|
||
|
|
. "$srcdir/lib/utils.sh"
|
||
|
|
|
||
|
|
# shellcheck disable=SC2034,SC2154
|
||
|
|
usage_description="
|
||
|
|
Adds / updates Bitbucket Pipelines workspace-level secured environment variable(s) from args or stdin
|
||
|
|
|
||
|
|
If no second argument is given, reads environment variables from standard input, one per line in 'key=value' format or 'export key=value' shell format
|
||
|
|
|
||
|
|
Workspace is case-insensitive
|
||
|
|
Variable keys are case-sensitive - a change in case will create a new one
|
||
|
|
|
||
|
|
Examples:
|
||
|
|
|
||
|
|
${0##*/} HariSekhon AWS_ACCESS_KEY_ID=AKIA...
|
||
|
|
|
||
|
|
echo AWS_ACCESS_KEY_ID=AKIA... | ${0##*/} HariSekhon
|
||
|
|
|
||
|
|
|
||
|
|
Loads both AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY via stdin:
|
||
|
|
|
||
|
|
aws_csv_creds.sh credentials_exported.csv | ${0##*/} HariSekhon
|
||
|
|
|
||
|
|
|
||
|
|
XXX: WARNING: variables at this level can be accessed by all users with 'write' permission for any repository (private or public) that belongs to this workspace
|
||
|
|
"
|
||
|
|
|
||
|
|
# used by usage() in lib/utils.sh
|
||
|
|
# shellcheck disable=SC2034
|
||
|
|
usage_args="<workspace> [<key>=<value> <key2>=<value2> ...]"
|
||
|
|
|
||
|
|
help_usage "$@"
|
||
|
|
|
||
|
|
min_args 1 "$@"
|
||
|
|
|
||
|
|
workspace="$1"
|
||
|
|
shift || :
|
||
|
|
|
||
|
|
existing_env_vars="$("$srcdir/bitbucket_api.sh" "/workspaces/$workspace/pipelines-config/variables" | jq -r '.values[] | [.key, .uuid] | @tsv')"
|
||
|
|
|
||
|
|
add_env_var(){
|
||
|
|
local env_var="$1"
|
||
|
|
env_var="${env_var%%#*}"
|
||
|
|
env_var="${env_var##[[:space:]]}"
|
||
|
|
env_var="${env_var##export}"
|
||
|
|
env_var="${env_var##[[:space:]]}"
|
||
|
|
if ! [[ "$env_var" =~ ^[[:alpha:]][[:alnum:]_]+=.+$ ]]; then
|
||
|
|
usage "invalid environment key=value argument given: $env_var"
|
||
|
|
fi
|
||
|
|
local key="${env_var%%=*}"
|
||
|
|
local value="${env_var#*=}"
|
||
|
|
if grep -q "^${key}[[:space:]]" <<< "$existing_env_vars"; then
|
||
|
|
local variable_uuid
|
||
|
|
variable_uuid="$(awk "/^${key}[[:space:]]/{print \$2}" <<< "$existing_env_vars" | sed 's/{//;s/}//')"
|
||
|
|
timestamp "updating Bitbucket environment variable '$key' in workspace '$workspace'"
|
||
|
|
"$srcdir/bitbucket_api.sh" "/workspaces/$workspace/pipelines-config/variables/%7B${variable_uuid}%7D" -X PUT -d "{\"key\": \"$key\", \"value\": \"$value\", \"secured\": true}"
|
||
|
|
else
|
||
|
|
timestamp "adding Bitbucket environment variable '$key' to workspace '$workspace'"
|
||
|
|
"$srcdir/bitbucket_api.sh" "/workspaces/$workspace/pipelines-config/variables" -X POST -d "{\"key\": \"$key\", \"value\": \"$value\", \"secured\": true}"
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if [ $# -gt 0 ]; then
|
||
|
|
for arg in "$@"; do
|
||
|
|
add_env_var "$arg"
|
||
|
|
done
|
||
|
|
else
|
||
|
|
while read -r line; do
|
||
|
|
add_env_var "$line"
|
||
|
|
done
|
||
|
|
fi
|