cleanup

Author: caseycs

Dockerfile

@@ -4,7 +4,7 @@ FROM alpine/git:${ALPINE_GIT_VERSION}
 ARG TARGETOS
 ARG TARGETARCH
 
-ARG MASKCMD_VERSION=0.0.4
+ARG MASKCMD_VERSION=v0.0.8
 
 RUN wget -O /usr/local/bin/maskcmd https://github.com/caseycs/maskcmd/releases/download/$MASKCMD_VERSION/maskcmd-$TARGETOS-$TARGETARCH \
     && chmod +x /usr/local/bin/maskcmd

README.md

@@ -7,9 +7,31 @@ Useful for bash scripts within K8S native pipelines, like Argo Workflows.
 
 ### Argo Workflow 
 
+```bash
+kubectl apply -f argo-workflow-example/secret.yaml
+argo submit argo-workflow-example/example.yaml -w --log
+Name:                maskcmd-example-mm2nj
+Namespace:           default
+ServiceAccount:      unset (will run with the default ServiceAccount)
+Status:              Pending
+Created:             Sun Mar 16 22:42:25 +0100 (now)
+Progress:
+maskcmd-example-mm2nj: + git clone https://x-token-auth:*****@bitbucket.org/project1/repo1.git
+maskcmd-example-mm2nj: Cloning into 'repo1'...
+maskcmd-example-mm2nj: remote: You may not have access to this repository or it no longer exists in this workspace. If you think this repository exists and you have access, make sure you are authenticated.
+maskcmd-example-mm2nj: fatal: repository 'https://bitbucket.org/project1/repo1.git/' not found
+maskcmd-example-mm2nj: Error: child command returned exit code: 128
+maskcmd-example-mm2nj: time="2025-03-16T21:42:28.457Z" level=info msg="sub-process exited" argo=true error="<nil>"
+maskcmd-example-mm2nj: Error: exit status 128
+maskcmd-example-mm2nj Failed at 2025-03-16 22:42:35 +0100 CET
+```
+
+Notice that there no `bitbucket-repo1-token` (secret value) in the output, but just asterisks (`*****@`).
+
+[Example K8S manigests](/argo-workflow-example).
 
 
-### shell scripts
+### Shell scripts
 
 Mask files content in certain dir:
 
@@ -42,4 +64,4 @@ secret is *****
 
 ### Docker image
 
-Based on recent [alpine/git](https://hub.docker.com/r/alpine/git): https://hub.docker.com/r/caseycs/maskcmd/tags
+[Dockerfile](/Dockerfile) is based on recent [alpine/git](https://hub.docker.com/r/alpine/git): https://hub.docker.com/r/caseycs/maskcmd/tags

…go-workflow-example/maskcmd-example.yaml argo-workflow-example/example.yamlargo-workflow-example/maskcmd-example.yaml renamed to argo-workflow-example/example.yaml argo-workflow-example/maskcmd-example.yaml renamed to argo-workflow-example/example.yaml

@@ -7,10 +7,10 @@ spec:
   templates:
     - name: demo
       container:
-        image: caseycs/maskcmd:v2.47.2-005
-        command: [maskcmd, --secrets-dir, /secret/, sh, -ex, -c]
+        image: caseycs/maskcmd:v2.47.2-008
+        command: [maskcmd, --secrets-dir, /secret/, --, sh, -exc]
         args: 
-        - |
+        - | 
           git clone https://x-token-auth:$(cat /secret/bitbucket-repo1/token)@bitbucket.org/project1/repo1.git
         volumeMounts:
         - name: secret-bitbucket-repo1

…-workflow-example/secret-docker-hub.yaml argo-workflow-example/secret.yamlargo-workflow-example/secret-docker-hub.yaml renamed to argo-workflow-example/secret.yaml argo-workflow-example/secret-docker-hub.yaml renamed to argo-workflow-example/secret.yaml

@@ -4,4 +4,4 @@ metadata:
   name: bitbucket-repo1
 type: Opaque
 data:
-  token: Yml0YnVja2V0LXJlcG8xLXRva2Vu
+  token: bitbucket-repo1-token # bitbucket-repo1-token