fix: allow to override authorized keys with env variables

Signed-off-by: Thomas Poignant <[email protected]>

Author: thomaspoignant

cmd/relayproxy/config/config.go

@@ -100,7 +100,8 @@ func New(flagSet *pflag.FlagSet, log *zap.Logger, version string) (*Config, erro
 	}
 	// Map environment variables
 	_ = k.Load(env.ProviderWithValue("", ".", func(s string, v string) (string, interface{}) {
-		if strings.HasPrefix(s, "RETRIEVERS") || strings.HasPrefix(s, "NOTIFIERS") {
+		if strings.HasPrefix(s, "RETRIEVERS") ||
+			strings.HasPrefix(s, "NOTIFIERS") {
 			configMap := k.Raw()
 			err := loadArrayEnv(s, v, configMap)
 			if err != nil {
@@ -109,6 +110,14 @@ func New(flagSet *pflag.FlagSet, log *zap.Logger, version string) (*Config, erro
 			}
 			return s, v
 		}
+
+		if strings.HasPrefix(s, "AUTHORIZEDKEYS_EVALUATION") {
+			return "authorizedKeys.evaluation", strings.Fields(v)
+		}
+		if strings.HasPrefix(s, "AUTHORIZEDKEYS_ADMIN") {
+			return "authorizedKeys.admin", strings.Fields(v)
+		}
+
 		return strings.ReplaceAll(strings.ToLower(s), "_", "."), v
 	}), nil)
 

cmd/relayproxy/config/config_test.go

@@ -2,6 +2,7 @@ package config_test
 
 import (
 	"fmt"
+	"github.com/stretchr/testify/require"
 	"io"
 	"os"
 	"testing"
@@ -834,6 +835,21 @@ func TestMergeConfig_FromOSEnv(t *testing.T) {
 	}
 }
 
+func TestSetAPIKeysFromEnv(t *testing.T) {
+	os.Setenv("AUTHORIZEDKEYS_EVALUATION", "key1 key2 key_3")
+	os.Setenv("AUTHORIZEDKEYS_ADMIN", "key4 key5")
+
+	fileLocation := "../testdata/config/valid-file.yaml"
+	f := pflag.NewFlagSet("config", pflag.ContinueOnError)
+	f.String("config", "", "Location of your config file")
+	_ = f.Parse([]string{fmt.Sprintf("--config=%s", fileLocation)})
+
+	got, err := config.New(f, zap.L(), "1.X.X")
+	require.NoError(t, err)
+	assert.Equal(t, []string{"key1", "key2", "key_3"}, got.AuthorizedKeys.Evaluation)
+	assert.Equal(t, []string{"key4", "key5"}, got.AuthorizedKeys.Admin)
+}
+
 func TestConfig_LogLevel(t *testing.T) {
 	tests := []struct {
 		name         string