go-gitea / gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
https://gitea.com
MIT License
44.35k stars 5.43k forks source link

Add API for getting actions secrets #29616

Open psychonaut opened 6 months ago

psychonaut commented 6 months ago

Feature Description

From api/swagger, putting and updating secrets is possible. But I don't see the possibility of getting secret value. Probably it's intentional.

Use case: I am using the helmfile+vals https://github.com/helmfile/vals application to deploy our Kubernetes environments. It can get secrets from external sources like Vault or various public cloud secrets managers. But it also can get secrets from Gitlab because they are exposed by API, for example https://github.com/helmfile/vals?tab=readme-ov-file#gitlab-secrets. I am using Gitea for my projects and it would be nice to have the possibility to keep these secrets in one place.

Screenshots

No response

oderwat commented 1 month ago

I ended up here, because I wanted to use secrets stored inside Gitea with our docker builders. Now I realize that they are not available through the API and have a big question mark over my head. Is there a reason why are they not available? I thought this would be a given.