Tweak

.gitea/workflows/encrypted.yaml

@@ -0,0 +1,42 @@
+name: Test Encrypted Config
+on:
+  push:
+    branches: '*'
+    paths:
+      - '!**'
+      - '.gitea/workflows/triggers/encrypted'
+
+env:
+  CERC_REGISTRY_USER_KEY: ${{ secrets.CICD_VAASL_LACONIC_USER_KEY }}
+  CERC_REGISTRY_BOND_ID: ${{ secrets.CICD_VAASL_LACONIC_BOND_ID }}
+  CERC_REGISTRY_DEPLOYER_LRN: ${{ vars.CERC_REGISTRY_DEPLOYER_LRN }}
+  CERC_REGISTRY_DEPLOYMENT_HOSTNAME: ${{ vars.CERC_REGISTRY_DEPLOYMENT_HOSTNAME }}-crypt
+  CERC_REGISTRY_DEPLOYMENT_REQUEST_USER_KEY: ${{ secrets.CICD_VAASL_DEPLOYMENT_REQUEST_USER_KEY }}
+  CERC_REGISTRY_DEPLOYMENT_REQUEST_BOND_ID: ${{ secrets.CICD_VAASL_DEPLOYMENT_REQUEST_BOND_ID }}
+  CERC_REGISTRY_DEPLOYMENT_REQUEST_PAYMENT_TO: ${{ secrets.CICD_VAASL_DEPLOYMENT_REQUEST_PAYMENT_TO }}
+
+jobs:
+  cns_publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Clone project repository"
+        uses: actions/checkout@v3
+      - name: Use Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 18
+      - name: "Enable Yarn"
+        run: corepack enable
+      - name: "Install registry CLI"
+        run: |
+          npm config set @cerc-io:registry https://git.vdb.to/api/packages/cerc-io/npm/
+          npm install -g @cerc-io/laconic-registry-cli
+      - name: "Install jq and gpg"
+        run: apt -y update && apt -y install jq gpg
+      - name: "Install laconic-so"
+        run: |
+          curl -LO https://git.vdb.to/cerc-io/stack-orchestrator/releases/download/latest/laconic-so
+          chmod +x ./laconic-so
+          mv ./laconic-so /usr/bin/laconic-so
+      - name: "Request Deployment w/ Encrypted Config"
+        run: scripts/request-app-deployment-encrypted.sh

.gitea/workflows/triggers/encrypted

@@ -0,0 +1,2 @@
+1
+2

scripts/request-app-deployment-encrypted.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+
+set -e
+
+CONFIG_FILE=`mktemp`
+ENV_FILE=`mktemp`
+
+rcd_name=$(jq -r '.name' package.json | sed 's/null//' | sed 's/^@//')
+rcd_app_version=$(jq -r '.version' package.json | sed 's/null//')
+
+cat <<EOF > "$CONFIG_FILE"
+services:
+  registry:
+    userKey: ${CERC_REGISTRY_DEPLOYMENT_REQUEST_USER_KEY}
+    bondId: ${CERC_REGISTRY_DEPLOYMENT_REQUEST_BOND_ID}
+    rpcEndpoint: '${CERC_REGISTRY_RPC_ENDPOINT:-http://testnet-a-1.dev.vaasl.io:26657}'
+    gqlEndpoint: '${CERC_REGISTRY_GQL_ENDPOINT:-http://testnet-a-1.dev.vaasl.io:9473/api}'
+    chainId: ${CERC_REGISTRY_CHAIN_ID:-laconic-08062024}
+    gas: 900000
+    fees: 900000alnt
+EOF
+
+if [ -z "$CERC_REGISTRY_APP_LRN" ]; then
+  authority=$(echo "$rcd_name" | cut -d'/' -f1 | sed 's/@//')
+  app=$(echo "$rcd_name" | cut -d'/' -f2-)
+  CERC_REGISTRY_APP_LRN="lrn://$authority/applications/$app"
+fi
+
+cat >$ENV_FILE <<EOF
+CERC_TEST_WEBAPP_CONFIG1="this is an encrypted string"
+CERC_TEST_WEBAPP_CONFIG2="this is also an encrypted string"
+CERC_WEBAPP_DEBUG="$CERC_REGISTRY_APP_LRN - CRYPT"
+EOF
+
+laconic-so request-webapp-deployment \
+  --laconic-config $CONFIG_FILE \
+  --deployer $CERC_REGISTRY_DEPLOYER_LRN \
+  --app $CERC_REGISTRY_APP_LRN \
+  --env-file $ENV_FILE \
+  --dns $CERC_REGISTRY_DEPLOYMENT_HOSTNAME \
+  --make-payment auto
+
+rm -f $ENV_FILE $CONFIG_FILE