hack

vault/main.tf

@@ -64,7 +64,7 @@ resource "coder_script" "vault" {
     VAULT_ADDR : var.vault_addr,
     VAULT_TOKEN : data.coder_git_auth.vault.access_token,
     VERSION : var.vault_cli_version,
-    SECRETS : replace(jsonencode(var.secrets), "\"", "\\\"")
+    SECRETS : replace(replace(jsonencode(var.secrets), "\"", "\\\""), "/", "::")
   })
   run_on_start = true
 }

vault/run.sh

@@ -69,16 +69,14 @@ if [ "${SECRETS}" = "{}" ]; then
     exit 0
 fi
 
-# DEBUG
+# Replace :: back to / in the SECRETS string
-printf "\n\n🐛 DEBUG: Printing secrets ...\n\n"
+SECRETS=$(echo "${SECRETS}" | sed 's/::/\//g')
-echo "${SECRETS}" > /tmp/debug_secrets.txt
-echo "${SECRETS}"
-echo "${SECRETS}" | jq
 
+# Now process the SECRETS string as before...
 printf "🔍 Fetching secrets ...\n\n"
-for key in $(echo "${SECRETS}" | jq -r "keys[]" ); do
+for key in $(echo "$${SECRETS}" | jq -r "keys[]" ); do
-    secrets=$(echo "${SECRETS}" | jq -r ".$key.secrets[]")
+    secrets=$(echo "$${SECRETS}" | jq -r ".$key.secrets[]")
-    file=$(echo "${SECRETS}" | jq -r ".$key.file")
+    file=$(echo "$${SECRETS}" | jq -r ".$key.file")
     printf "Fetching secrets from $${key} ...\n"
     for secret in $${secrets}; do
         value=$(vault kv get -format=json $${key} | jq -r ".data.data.$${secret}")