User Story

As a developer using OpenShift
I want to volume mount secrets into Builds
So that I can use credentials during a build without leaking those credentials into the resulting container image

As a developer using OpenShift
I want to volume mount ConfigMaps into Builds
So that I can use configuration during a build without leaking that config into the resulting container image

Acceptance Criteria

• Developers can define volume mounts for Secrets in Docker and Source strategy builds
• Developers can define volume mounts for ConfigMaps in Docker and Source strategy builds

Docs Impact

Build documentation will need to include this new feature, with YAML examples of how to add Secret and ConfigMap volume mounts.

Notes

Enhancement proposal: https://github.com/openshift/enhancements/blob/master/enhancements/builds/volume-mounted-resources.md

Repositories & Files

• openshift/api
  • https://github.com/openshift/api/tree/master/build/v1
• openshift/apiserver
• openshift/builder
  • https://github.com/openshift/builder/blob/master/pkg/build/builder/daemonless.go
• openshift/openshift-controller-manager
  • https://github.com/openshift/openshift-controller-manager/tree/master/pkg/build/controller/strategy
• openshift/origin (e2e)