Merge pull request #3 from grapl-security/cm/enable-cache

Re-enable remote Pants cache; use Vault

Author: christophermaier

.buildkite/pipeline.verify.yml

@@ -1,11 +1,17 @@
 ---
 env:
   PANTS_CONFIG_FILES: "['pants.toml', 'pants.ci.toml']"
+  BUILDKITE_PLUGIN_VAULT_ENV_SECRET_PREFIX: "secret/data/buildkite/env"
 
 steps:
   - label: ":lint-roller::bash: Lint Shell"
     command:
       - make lint-shell
+    plugins:
+      - grapl-security/vault-login#v0.1.0
+      - grapl-security/vault-env#v0.1.0:
+          secrets:
+            - grapl-artifacts-buildkite-plugin/TOOLCHAIN_AUTH_TOKEN
 
   - label: ":lint-roller::buildkite: Lint Plugin"
     command:
@@ -14,6 +20,11 @@ steps:
   - label: ":bash: Unit Tests"
     command:
       - make test-shell
+    plugins:
+      - grapl-security/vault-login#v0.1.0
+      - grapl-security/vault-env#v0.1.0:
+          secrets:
+            - grapl-artifacts-buildkite-plugin/TOOLCHAIN_AUTH_TOKEN
 
   # TODO: Add plugin tests
   # - label: ":buildkite: Plugin Tests"

pants.ci.toml

@@ -12,7 +12,5 @@ pants_ignore = [
   ".cache/pants/lmdb_store",
 ]
 
-# Temporarily disable the remote cache until we can get
-# repository-specific tokens into the CI/CD system
-# [auth]
-# from_env_var = "TOOLCHAIN_AUTH_TOKEN"
+[auth]
+from_env_var = "TOOLCHAIN_AUTH_TOKEN"