feat(runners): read registration token from file

Author: fiftin

cli/cmd/runner_register.go

@@ -10,17 +10,42 @@ import (
 )
 
 var runnerRegisterArgs struct {
-	stdinRegistrationToken bool
-	projectID              int
+	stdinRegistrationToken    bool
+	registrationTokenFilePath string
+	projectID                 int
 }
 
 func init() {
 	runnerRegisterCmd.PersistentFlags().BoolVar(&runnerRegisterArgs.stdinRegistrationToken, "stdin-registration-token", false, "Read registration token from stdin")
+	runnerRegisterCmd.PersistentFlags().StringVar(&runnerRegisterArgs.registrationTokenFilePath, "registration-token-file", "", "Read registration token from a file")
 	runnerRegisterCmd.PersistentFlags().IntVar(&runnerRegisterArgs.projectID, "project-id", 0, "Project ID for project-level runner (global runner if not provided)")
 	runnerCmd.AddCommand(runnerRegisterCmd)
 }
 
+func readRegistrationTokenFromFile(path string) {
+	tokenBytes, err := os.ReadFile(path)
+	if err != nil {
+		panic(err)
+	}
+
+	if len(tokenBytes) == 0 {
+		panic("Empty token")
+	}
+
+	util.Config.Runner.RegistrationToken = strings.TrimSpace(string(tokenBytes))
+}
+
 func initRunnerRegistrationToken() {
+	if runnerRegisterArgs.registrationTokenFilePath != "" {
+		readRegistrationTokenFromFile(runnerRegisterArgs.registrationTokenFilePath)
+		return
+	}
+
+	if util.Config.Runner.RegistrationTokenFile != "" {
+		readRegistrationTokenFromFile(util.Config.Runner.RegistrationTokenFile)
+		return
+	}
+
 	if !runnerRegisterArgs.stdinRegistrationToken {
 		return
 	}

util/config.go

@@ -114,10 +114,11 @@ const (
 // */
 
 type RunnerConfig struct {
-	RegistrationToken string `json:"-" env:"SEMAPHORE_RUNNER_REGISTRATION_TOKEN,sensitive"`
-	Token             string `json:"token,omitempty" env:"SEMAPHORE_RUNNER_TOKEN,sensitive"`
-	TokenFile         string `json:"token_file,omitempty" env:"SEMAPHORE_RUNNER_TOKEN_FILE"`
-	PrivateKeyFile    string `json:"private_key_file,omitempty" env:"SEMAPHORE_RUNNER_PRIVATE_KEY_FILE"`
+	RegistrationToken     string `json:"-" env:"SEMAPHORE_RUNNER_REGISTRATION_TOKEN,sensitive"`
+	RegistrationTokenFile string `json:"registration_token_file,omitempty" env:"SEMAPHORE_RUNNER_REGISTRATION_TOKEN_FILE"`
+	Token                 string `json:"token,omitempty" env:"SEMAPHORE_RUNNER_TOKEN,sensitive"`
+	TokenFile             string `json:"token_file,omitempty" env:"SEMAPHORE_RUNNER_TOKEN_FILE"`
+	PrivateKeyFile        string `json:"private_key_file,omitempty" env:"SEMAPHORE_RUNNER_PRIVATE_KEY_FILE"`
 
 	// OneOff indicates than runner runs only one job and exit. It is very useful for dynamic runners.
 	// How it works?