From c23e076cdb69a2fd6a964361d773d7e43036fe3c Mon Sep 17 00:00:00 2001
From: Nikolai Prokoschenko <nikolai.prokoschenko@kurzdigital.com>
Date: Fri, 17 May 2024 11:07:27 +0200
Subject: [PATCH] Add SOPS support

---
 Dockerfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 82fe8ac..d73e116 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,6 +7,12 @@ ARG TARGETARCH
 ADD https://get.helm.sh/helm-v${HELM_VERSION}-linux-${TARGETARCH}.tar.gz /tmp/tarballs/
 RUN tar zxvf /tmp/tarballs/*.tar.gz -C /usr/local/bin/ --strip-components=1 linux-${TARGETARCH}/helm
 
+# sops: encrypting secrets
+FROM ubuntu:22.04 as sops
+ARG SOPS_VERSION=3.8.1
+ARG ARCH=amd64
+ADD --chmod=755 https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.linux.$ARCH /usr/local/bin/sops
+
 FROM node:16-bullseye-slim
 
 # We need to set a home directory, since both Helm and NPM won't be able to write to /.
@@ -15,6 +21,7 @@ ENV HOME=/tmp/argocd-cdk8s-plugin/
 RUN mkdir $HOME && chmod 770 $HOME
 RUN apt-get update && apt-get install git tree ca-certificates -y --no-install-recommends && rm -rf /var/lib/apt/lists/*
 COPY --from=helm /usr/local/bin/ /usr/local/bin/
+COPY --from=sops /usr/local/bin/ /usr/local/bin/
 COPY plugin.yaml /home/argocd/cmp-server/config/plugin.yaml
 COPY scripts/* /