feat: support build-secrets in managed-mode
Metadata
Current evaluation
Merged managed-mode build-secret support in #104 via commit 8c6c0475, encoding host secrets and decoding them in managed instances to re-render project secrets.
Resolution: closed resolved
Reason: PR #104 was merged as commit 8c6c0475. It passes encoded host secrets through the managed instance environment and decodes them to re-render project secrets.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This is done by encoding the secrets, in the host-application, into the environment of the managed instance. The managed instance then decodes this environment and uses it to re-render the project secrets.
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `tox`?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged managed-mode build-secret support in #104 via commit 8c6c0475, encoding host secrets and decoding them in managed instances to re-render project secrets. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #104 as commit 8c6c0475, adding managed-mode build-secrets support by encoding host secrets and decoding them to re-render project secrets. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged into main. Implements build-secrets support in managed-mode by encoding secrets into the host-application environment for the managed instance to decode and re-render. Approved by two reviewers, passed CI, and achieved 100% diff coverage. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/craft-application#100
(confidence 100%)
The build-secrets feature request was closed by the implementation merged in PR #104.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #378 feat: enable build-secrets | rockcraft | merged | Merged PR #378 enabled build-secrets support, landing a six-file (+48/-4) change on feature/build-secrets after approval by two reviewers. | |
| #100 Add support for build secrets | craft-application | closed | Managed-mode build-secret support was merged in canonical/craft-application#104 via commit 8c6c0475. | |
| #50 spec for handling build-time secrets | craft-application | closed | Build-time secrets were delivered through a secrets API and application rendering; managed-mode support followed in #104. | |
| #102 Support build secrets in destructive mode | craft-application | merged | PR #102 merged, adding build-secrets support in destructive mode: YAML-service secret handling plus Application rendering. Landed as commit ef5620dd, followed by managed-mode support in #104 (8c6c0475). | |
| #657 feat!(secrets): remove secrets | craft-application | merged | Merged PR #657 in commit ad52b56b, removing built-in secrets support; applications can instead integrate secrets through the prototype secrets service. |