mirror of
https://github.com/openfaas/faas.git
synced 2025-06-09 08:46:48 +00:00
0fef825fb4
**What** - During function creation, accept an array of strings defining swarm secrets that are required for the service - Update docs - Add new guide on using the secrets capability - Add new sample function to highlight using environment variables - Update `ApiKeyProtected` sample function to utilize the new secrets capabilities **Why** - This allows secrets to remain encrypted at rest instead of being unencrypted in environment variables and yaml files. Fixes #285 Signed-off-by: Lucas Roesler <lucas.roesler@gmail.com>
32 lines
468 B
Go
32 lines
468 B
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"log"
|
|
"os"
|
|
"strings"
|
|
)
|
|
|
|
func handle(body []byte) {
|
|
key := os.Getenv("Http_X_Api_Key")
|
|
|
|
secretBytes, err := ioutil.ReadFile("/run/secrets/secret_api_key")
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
secret := strings.TrimSpace(string(secretBytes))
|
|
|
|
if key == secret {
|
|
fmt.Println("Unlocked the function!")
|
|
} else {
|
|
fmt.Println("Access denied!")
|
|
}
|
|
}
|
|
|
|
func main() {
|
|
bytes, _ := ioutil.ReadAll(os.Stdin)
|
|
handle(bytes)
|
|
}
|