<html><body>
<h3>Roman Mohr created OVIRT-1867:</h3>
<pre> Summary: Allow embedded secrets inside the source repo for CI
Key: OVIRT-1867
URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1867
Project: oVirt - virtualization made easy
Issue Type: By-EMAIL
Reporter: Roman Mohr
Assignee: infra</pre>
<p>In order to improve the self-service capabilities of standard-ci it is important for projects, that they can add their own secrets to projects (to reach external services, e.g. docker hub, …).</p>
<p>Travis has a very nice system which helps engineers there: <a href="https://docs.travis-ci.com/user/encryption-keys/">https://docs.travis-ci.com/user/encryption-keys/</a></p>
<p>Basically the CI system needs to generate a public/private key pair for every enabled git repo. The engineer simply fetches the public key via a well know URL and encrypts the secrets. Then the encrypted secret can be made part of the source repo. Before the tests are run the CI system decrypts the secrets. Than can play together pretty well with Jenkinsfiles too.</p>
<p>Benefit:</p>
<pre>* Less manual intervention from CI team to add secrets to jobs
* Strengthen the config-in-code thinking</pre>
<p>— This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100077)</p>
<img src="https://u4043402.ct.sendgrid.net/wf/open?upn=i5TMWGV99amJbNxJpSp2-2BJ33BSM3tuiUfRTk64K-2BOjFGpbLfKchRDAcgH2YY74RHA1NHhulgEMzT-2FXN20boxPUsUXpO9mYGBKhiPb4RZ-2B-2F67HWdXwaXoLD-2FadcIF1OlTu9f8XlZlj3-2Bfg9-2Bs1eBQsGa0xj8Sm1l9qIIyqD6ZVUBzm0sS6uaL9HlPblNZizBz26-2B6KHUhspwibZURxPJoLjCiv1u3HYbimTAxpGhps3dur5buMxeH6dHD8F6H0JgHOdJJvMLAluzI4b3L27YtGHvuJ2qjNSukFZO-2F8vGbOG-2FdoLi1dpv-2FSYiljwDBTgBQb70bsXVggxdQlZGxL-2FWUJJYhPvqvlHK2nsrON3Ep9nOqA51SA5PDQARHF0Wx-2FKhwCcPCw8Xi-2BW7R5GoZ7bmUkBR-2Fwv7TEWx-2FkiMI5OxXyofatNXv1RmjRzkgx4ErHjlT" alt="" width="1" height="1" border="0" style="height:1px !important;width:1px !important;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !important;"/>
</body></html>