From 309000456a5895d3acb6ccb36a44eb75ce23c0a6 Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Tue, 14 Jan 2025 14:36:56 +0100
Subject: [PATCH] bake: test secrets override

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 bake/bake_test.go | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/bake/bake_test.go b/bake/bake_test.go
index 15a3333d2a0d..432906a7c302 100644
--- a/bake/bake_test.go
+++ b/bake/bake_test.go
@@ -33,6 +33,9 @@ target "webapp" {
 	args = {
 		VAR_BOTH = "webapp"
 	}
+	secret = [
+		"id=FOO,env=FOO"
+	]
 	inherits = ["webDEP"]
 }`),
 	}
@@ -150,6 +153,15 @@ target "webapp" {
 		require.Equal(t, []string{"webapp"}, g["default"].Targets)
 	})
 
+	t.Run("SecretsOverride", func(t *testing.T) {
+		t.Setenv("FOO", "foo")
+		t.Setenv("BAR", "bar")
+		m, _, err := ReadTargets(ctx, []File{fp}, []string{"webapp"}, []string{"webapp.secrets=id=BAR,env=BAR"}, nil, &EntitlementConf{})
+		require.NoError(t, err)
+		require.Len(t, m["webapp"].Secrets, 1)
+		require.Equal(t, "BAR", m["webapp"].Secrets[0].ID)
+	})
+
 	t.Run("PatternOverride", func(t *testing.T) {
 		t.Parallel()
 		// same check for two cases