adjusted secrets-vol sample

Author: reggeenr

secrets-vol/Dockerfile

@@ -1,8 +1,10 @@
-FROM icr.io/codeengine/golang:alpine
-COPY secret.go /
-RUN go build -o /secret /secret.go
+FROM quay.io/projectquay/golang:1.22 AS build-env
+WORKDIR /go/src/app
+COPY . .
+
+RUN CGO_ENABLED=0 go build -o /go/bin/app secret.go
 
 # Copy the exe into a smaller base image
-FROM icr.io/codeengine/alpine
-COPY --from=0 /secret /secret
-CMD /secret
+FROM gcr.io/distroless/static-debian12
+COPY --from=build-env /go/bin/app /
+CMD ["/app"]

secrets-vol/run

@@ -32,8 +32,7 @@ ibmcloud ce secret create --name sec-secret-vol \
   --from-file MY_FILE=file
 
 # Create the app
-ibmcloud ce app create -n sec-app-vol --image ${REGISTRY}/ce-secret-vol \
-  --mount-secret /mysecrets=sec-secret-vol
+ibmcloud ce app create -n sec-app-vol --image ${REGISTRY}/ce-secret-vol --mount-secret /mysecrets=sec-secret-vol --cpu 0.125 --memory 0.5G
 
 # Get the URL of the app for later use
 URL=$(ibmcloud ce app get -n sec-app-vol -o url)
@@ -47,14 +46,15 @@ echo Instance name: $name
 
 # Now check the logs to see if the env vars were set
 ibmcloud ce app logs --instance $name | tee out
+[[ "${PIPESTATUS[0]}" == "0" ]]
 grep MY_ out
-if ! [[ $(grep MY_ out | wc -l) == "4" ]]; then
+if (( $(grep MY_ out | wc -l) != 4 )); then
   echo "Unexpected output"
   exit 1
 fi
 
 # Check to see if the context of "file" are assign to the "file" env var.
-if ! [[ $(grep '^file: In Congress' out | wc -l) == "1" ]]; then
+if ((  $(grep '^file: In Congress' out | wc -l) != 1 )); then
   echo "Unexpected output"
   exit 1
 fi