cr_buildstep_decrypt: Create a build step for decrypting files via KMS

In googleCloudRunner: R Scripts in the Google Cloud via Cloud Run, Cloud Build and Cloud Scheduler

Create a build step for decrypting files via KMS

Description

Create a build step to decrypt files using CryptoKey from Cloud Key Management Service. Usually you will prefer to use cr_buildstep_secret

Usage

cr_buildstep_decrypt(cipher, plain, keyring, key, location = "global", ...)

Arguments

cipher	The file that has been encrypted
plain	The file location to decrypt to
keyring	The KMS keyring to use
key	The KMS key to use
location	The KMS location
...	Further arguments passed in to cr_buildstep

Details

Key Management Store can encrypt secret files for use within your later buildsteps.

Setup

You will need to set up the encrypted key using gcloud following the link from Google

See Also

Other Cloud Buildsteps: cr_buildstep_bash(), cr_buildstep_df(), cr_buildstep_docker(), cr_buildstep_edit(), cr_buildstep_extract(), cr_buildstep_gcloud(), cr_buildstep_gitsetup(), cr_buildstep_mailgun(), cr_buildstep_nginx_setup(), cr_buildstep_packagetests(), cr_buildstep_pkgdown(), cr_buildstep_run(), cr_buildstep_r(), cr_buildstep_secret(), cr_buildstep_slack(), cr_buildstep_targets(), cr_buildstep()

Examples

cr_project_set("my-project")
cr_bucket_set("my-bucket")
cr_buildstep_decrypt("secret.json.enc",
  plain = "secret.json",
  keyring = "my_keyring",
  key = "my_key"
)

googleCloudRunner documentation built on March 18, 2022, 8 p.m.