Building docker images that puts secrets into environment variables before the application starts

[testersen]

Related issues:

• seamless integration between io.tnboot plugin and Spring Boot to build docker images #11
• io.tnboot plugin should provide a vendor agnostic key vault integration #12

As a follow up to:

• feat: gradle plugin #10

---

The io.tnboot plugin, provided correct configuration, should be able to load secrets in the generated docker image.

Important

Secrets should not be written at all into the docker image!

The implementation would be something of the following:

ENTRYPOINT [ "sh -c 'keyvault-solution my-secret-configuration.json && entrypoint.sh'" ]

Where the keyvault-solution would require parameters provided by the host to connect to the keyvault, and the my-secret-configuration.json would provide information about what secrets to fetch, and where to put them.