Break pipeline when external secret not found

Drone Support
1

Hi,

How can I break the pipeline or step when a external secret is not found or an error is thrown ?

Currently a blank secret is created .

Thanks. Regards.

2

Hello @mdaguete

Thank you for reaching out to Harness Support. Could you please help us with more details on how you are defining this external secret ?

If possible please do share with us the YAML file with us so we can try to reproduce this on our end as well. Looking forward to hearing from you.

Thanks,
Harness

3

Hi @csgit,

If you use the same yaml that in your example Vault | Drone and then stop the vaul daemon and exec the pipeline. The pipeline ends without error, and the secret has de “” value, instead of breaking the pipeline.

It seems that the problem comes from this comment drone-runner-docker/compiler.go at master · drone-runners/drone-runner-docker · GitHub

Regards.

4

How can I break the pipeline or step when a external secret is not found or an error is thrown ?

This is not currently possible. The current expectation is that if a secret is required, your pipeline step that relies on the secret will fail when it encounters the missing value. For example, see this check in the Slack plugin.

We have discussed expanding the from_secret syntax to include an optional required parameter that would allow you to force fail the pipeline if a secret does not exist (example below). This is something we may consider adding in our future.

password:
  from_secret:
    name: <string>
    required: <bool>
5

The “required” property approach sounds good !

Thanks for your answer @bradrydzewski !