feat: add kubeseal-encrypt npm package

.dockerignore

@@ -2,6 +2,7 @@
 .git
 .history
 .npm
+.npmrc
 .vscode
 build
 node_modules

.github/workflows/main.yml

@@ -43,6 +43,7 @@ jobs:
           registry: ${{ env.CACHE_REGISTRY }}
           image_name: ${{ env.CACHE_REPO }}
           image_tag: ${{ env.TAG }}
+          build_extra_args: '--secret id=NPM_TOKEN,env=BOT_TOKEN'
       - name: Retag from cache and push
         if: ${{ github.actor != 'dependabot[bot]' }}
         run: |

.gitignore

@@ -15,3 +15,5 @@ nginx.conf
 .env
 !.env.sample
 /.idea/
+
+.npmrc

.npmrc.sample

@@ -0,0 +1,5 @@
+engine-strict=true
+
+# The linode github packages registry
+@linode:registry=https://npm.pkg.github.com/linode
+//npm.pkg.github.com/:_authToken=YOUR_GITHUB_TOKEN_HERE

Dockerfile

@@ -12,6 +12,10 @@ COPY package*.json ./
 RUN echo "SKIP_PREFLIGHT_CHECK=true" > .env
 RUN echo "EXTEND_ESLINT=true" >> .env
 
+RUN echo "@linode:registry=https://npm.pkg.github.com/linode" > .npmrc
+RUN --mount=type=secret,id=NPM_TOKEN \
+  echo "//npm.pkg.github.com/:_authToken=$(cat /run/secrets/NPM_TOKEN)" >> .npmrc
+
 RUN npm ci
 
 # --------------- ci stage for CI runner

package.json

@@ -18,6 +18,7 @@
     "@fortawesome/fontawesome-free": "5.15.4",
     "@hookform/resolvers": "^3.9.0",
     "@iconify/react": "^6.0.0",
+    "@linode/kubeseal-encrypt": "1.0.0",
     "@monaco-editor/react": "^4.7.0",
     "@mui/icons-material": "5.8.4",
     "@mui/lab": "5.0.0-alpha.86",

src/pages/secrets/create-edit/SecretCreateEditPage.tsx

@@ -21,7 +21,7 @@ import { useEffect } from 'react'
 import { cloneDeep, isEmpty, isEqual } from 'lodash'
 import { LoadingButton } from '@mui/lab'
 import DeleteButton from 'components/DeleteButton'
-import { encryptSecretItem } from 'utils/sealedSecretsUtils'
+import { encryptSecretItem } from '@linode/kubeseal-encrypt'
 import { useSession } from 'providers/Session'
 import { useTranslation } from 'react-i18next'
 import { mapObjectToKeyValueArray, valueArrayToObject } from 'utils/helpers'