| 163 | } |
| 164 | |
| 165 | func resolveEnv(ctx context.Context, r secrets.Resolver, env []string) ([]string, error) { |
| 166 | out := make([]string, 0, len(env)) |
| 167 | for _, kv := range env { |
| 168 | key, value, _ := strings.Cut(kv, "=") |
| 169 | if !strings.HasPrefix(value, sePrefix) { |
| 170 | out = append(out, kv) |
| 171 | continue |
| 172 | } |
| 173 | resolved, err := resolveRef(ctx, r, key, value) |
| 174 | if err != nil { |
| 175 | return nil, err |
| 176 | } |
| 177 | out = append(out, key+"="+resolved) |
| 178 | } |
| 179 | return out, nil |
| 180 | } |
| 181 | |
| 182 | func resolveRef(ctx context.Context, r secrets.Resolver, key, value string) (string, error) { |
| 183 | name := strings.TrimPrefix(value, sePrefix) |