Feature #18689
Updated by Peter Amstutz about 2 years ago
Add API and crunch-run support for secret_environment.
https://dev.arvados.org/projects/arvados/wiki/Container_secret_mounts#Secret-environment
On the API side:
* Migration to add secret_environment and secret_environment_md5 to the database schema
* Setting secret_environment updates secret_environment_md5
* Endpoint to request secret_environment
* On container completion/failure, wipe the value of secret_environment
* Compare secret_environment_md5 in container reuse decisions.
* Tests
On the crunch-run side:
* Check the new secret_environment endpoint
* Merge the secret environment with the regular environment when invoking the container
When in doubt, look at how secret_mounts are handled.