On Tue, Apr 28, 2020 at 1:27 AM Miro Hrončok <mhroncok@redhat.com> wrote:
Hello CIistas (I've just invented this term, probably not good, sorry).

Do we have something like encrypted secrets [0] for the Fedora CI?

I'd like to add CI tests for twine [1] that would:

  - create a Python package named fedora-ci-canary, versioned as 0+<uuid>
  - upload the package to Test PyPI [2][3]
  - verify it is there

For this however, we would need to store credentials for a Test PyPI account.
I don't mind if the credentials are compromised via malicious Pull Request (they
are to a test environment only), but I don't feel comfortable to store them in
git in plaintext (or obfuscated).


Hi,

If you can use Zuul, there is support for secrets: https://zuul-ci.org/docs/zuul/reference/secret_def.html

If you choose this road, let me know and I'll help you setup your job.
--
Fred - May the Source be with you