In this challenge, you'll practice how to pass secrets to functions and use them within your code.

Preparation

To complete this challenge, ensure you have a Dagger module initialized at ~/my-module using your preferred SDK.

Passing secrets to functions

Implement a function named readSecret that takes a parameter of type secret called secret and simply returns it as-is.

In the following examples, you'll call this function and pass secrets to it from various providers. To complete each challenge, enter the plaintext secret values into the appropriate input fields.

dagger call read-secret --secret <???> plaintext

Environment variable MY_SECRET:

File ~/.secret:

Result of executing ~/secret.sh:

Read from Vault (running locally) from path my/secret (key: value):

Using secrets in containers

Implement a function named secretVar that accepts a parameter of type secret called secret, and returns an alpine container with the secret mounted as an environment variable named MY_SECRET.

Implement a function named secretMount that accepts a parameter of type secret called secret, and returns an alpine container with the secret mounted as a file at /tmp/secret.

References

• Dagger documentation
  • Features: Security
  • Secret arguments
  • Secrets
  • Core Types: Secret
  • Cookbook: Secrets