adds the ['concourse-ci']['docker-compose']['web_encryption_key_vault_item'] attribut...

[metasearch/grid-chef-repo.git] / cookbooks / concourse-ci / recipes / docker-compose.rb

diff --git a/cookbooks/concourse-ci/recipes/docker-compose.rb b/cookbooks/concourse-ci/recipes/docker-compose.rb
index 6f60512..9d4afe2 100644 (file)
--- a/cookbooks/concourse-ci/recipes/docker-compose.rb
+++ b/cookbooks/concourse-ci/recipes/docker-compose.rb
@@ -154,6 +154,13 @@ override_config_srvs['concourse-web']['ports'] = ['8080:8080'] if web_ports.empt
 
 web_vols.push("#{node['concourse-ci']['docker-compose']['web_keys_dir']}:/concourse-keys")
 
+encryption_key = nil
+encryption_key_vault_item = node['concourse-ci']['docker-compose']['web_encryption_key_vault_item']
+unless encryption_key_vault_item.empty?
+  encryption_key = get_vault_item_value(encryption_key_vault_item)
+  web_envs['CONCOURSE_ENCRYPTION_KEY'] = '${CONCOURSE_ENCRYPTION_KEY}'
+end
+
 web_password_reset = node['concourse-ci']['docker-compose']['web_password_reset']
 basic_auth_passwd = nil
 web_password_vault_item = node['concourse-ci']['docker-compose']['web_password_vault_item']
@@ -277,6 +284,7 @@ template env_file do
   variables(
     # secrets
     db_passwd: db_passwd,
+    encryption_key: encryption_key,
     basic_auth_passwd: basic_auth_passwd,
     oauth_client_id: oauth_client_id,
     oauth_client_secret: oauth_client_secret