bake: allow overriding declared secret sources

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-07-21 12:20:36 +02:00
parent 9618d82eff
commit febb45afe2
5 changed files with 152 additions and 7 deletions
@@ -433,6 +433,7 @@ $ docker buildx bake --set foo*.no-cache                # bypass caching only fo
 $ docker buildx bake --set target.platform+=linux/arm64 # appends 'linux/arm64' to the platform list
 $ docker buildx bake --set target.contexts.bar=../bar   # overrides 'bar' named context
 $ docker buildx bake --set target.resources.memory=2g   # overrides memory resource limit
+$ docker buildx bake --set target.secret.aws=env=AWS    # overrides source for an existing secret
 ```

 > [!NOTE]
@@ -464,6 +465,7 @@ You can override the following fields:
 * `pull`
 * `push`
 * `resources`
+* `secret.<id>`
 * `secrets`
 * `ssh`
 * `tags`