kamal
kamal copied to clipboard
feat: ssh: use secret in key_data
Support secret lookup for key_data
What’s changed?
key_datacan now be a string to reference a secret, just likeregistry.usernameandregistry.password.- To avoid breaking changes, the behavior is reversed compared to
registry:- Registry.username | Registry.password :
Array → lookup secret,String → raw value - SSH.key_data:
Array → raw value,String → lookup secret
- Registry.username | Registry.password :
Why?
- This makes it easier to manage SSH keys securely using
.kamal/secrets. - Avoids exposing sensitive data in Git.
would be very nice!
Superseded by #1620