deploy: isolate git and connector secrets

2026-08-04 15:04:39 +02:00
parent ff271d3cce
commit b5071f1494
7 changed files with 189 additions and 3 deletions
@@ -190,6 +190,20 @@ verify_copied_operator_fixtures() {
    return 1
  fi
  echo "literal secret-source fixture rejected passed"
+
+  printf 'THT_WS_EXAMPLE_DWH_PASSWORD_SOURCE=installation-secrets/password\n' >"$fixture_root/relative-source.env"
+  if verify_path_variable_values "$fixture_root/relative-source.env" >/dev/null 2>&1; then
+    echo "relative secret-source fixture was accepted" >&2
+    return 1
+  fi
+  echo "relative secret-source fixture rejected passed"
+
+  printf 'THT_WS_EXAMPLE_DWH_PASSWORD_SOURCE=/srv/thothii/secrets/../password\n' >"$fixture_root/non-normalized-source.env"
+  if verify_path_variable_values "$fixture_root/non-normalized-source.env" >/dev/null 2>&1; then
+    echo "non-normalized secret-source fixture was accepted" >&2
+    return 1
+  fi
+  echo "non-normalized secret-source fixture rejected passed"
 }

 case "$profile" in