mirrors/pikasTech-HWLAB
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: render secret-plane issue as label-safe value

Browse Source
This commit is contained in:
root
2026-06-28 06:45:22 +00:00
parent 858f58282d
commit 79f8847636
2 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/gitops-render.mjs
+13 -1
View File
@@ -5583,6 +5583,7 @@ function runtimeSecretPlaneExternalSecret({ config, secret, index, namespace, la
const data = Array.isArray(secret?.data) ? secret.data : [];
assert.ok(data.length > 0, `secretPlane.secrets[${index}].data must not be empty`);
const sourceRefs = data.map((item) => requiredSecretPlaneString(item?.remoteRef, `secretPlane.secrets[${index}].data.remoteRef`));
const issueRef = String(config.issue ?? "pikasTech/HWLAB#2234");
return {
apiVersion: "external-secrets.io/v1",
kind: "ExternalSecret",
@@ -5593,10 +5594,11 @@ function runtimeSecretPlaneExternalSecret({ config, secret, index, namespace, la
...labels,
"app.kubernetes.io/name": externalSecretName,
"app.kubernetes.io/component": "external-secret",
"hwlab.pikastech.local/secret-plane": String(config.issue ?? "pikasTech/HWLAB#2234")
"hwlab.pikastech.local/secret-plane": secretPlaneIssueLabelValue(issueRef)
},
annotations: {
...annotations,
"hwlab.pikastech.local/secret-plane-issue": issueRef,
"hwlab.pikastech.local/source-ref": sourceRefs.join(","),
"hwlab.pikastech.local/values-printed": "false"
}
@@ -5622,6 +5624,16 @@ function runtimeSecretPlaneExternalSecret({ config, secret, index, namespace, la
};
}
function secretPlaneIssueLabelValue(issueRef) {
const text = String(issueRef ?? "").trim();
const issueNumber = text.match(/#([0-9]+)$/u)?.[1];
const raw = issueNumber ? `issue-${issueNumber}` : text;
const normalized = raw.replace(/[^A-Za-z0-9_.-]+/gu, "-").replace(/^[^A-Za-z0-9]+|[^A-Za-z0-9]+$/gu, "");
const label = normalized.slice(0, 63).replace(/[^A-Za-z0-9]+$/u, "");
assert.ok(label.length > 0, "secretPlane.issue must produce a Kubernetes label-safe value");
return label;
}
function requiredSecretPlaneString(value, label) {
assert.equal(typeof value, "string", `${label} must be a string`);
const trimmed = value.trim();