Feature: Support PEM via environment variable

[elgohr]

Is your feature request related to a problem? Please describe.
At the moment the PEM must be added within a volume (see PEM_FILE).

Describe the solution you'd like
It would be great if this could also be provided via environment variable.

Describe alternatives you've considered

Dockerfile

FROM ghcr.io/leanix/leanix-github-agent:v0.1.0
COPY entrypoint.sh /custom_entrypoint.sh
ENTRYPOINT ["/custom_entrypoint.sh"]

custom_entrypoint.sh

#!/usr/bin/env sh
set -e

echo "${PEM_CONTENT}" > "${PEM_FILE}"

java ${JAVA_OPTS} -jar /app.jar

[vg-leanix]

Hey @elgohr,
thanks for the feedback. Could you briefly elaborate on how having the PEM key as env param would help you? Thanks

[elgohr]

This would avoid the need to provision and secure additional resources (storage) besides the standard configuration (which is done in environment variables). In addition this would minimize the probability of leaking the PEM as it would only be present as environment variable in the running process, instead of being a file readable by multiple processes (in case the container gets compromised).