fix: read GitHub token from Secret

Author: HotThoughts

examples/providerconfig/providerconfig.yaml

@@ -6,6 +6,6 @@ spec:
   credentials:
     source: Secret
     secretRef:
-      name: example-creds
+      name: github-creds
       namespace: crossplane-system
       key: credentials

examples/providerconfig/secret.yaml.tmpl

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: example-creds
+  name: github-creds
   namespace: crossplane-system
 type: Opaque
 stringData:

internal/clients/github.go

@@ -19,6 +19,7 @@ package clients
 import (
 	"context"
 	"encoding/json"
+	"fmt"
 
 	"github.com/crossplane/crossplane-runtime/pkg/resource"
 	"github.com/pkg/errors"
@@ -40,6 +41,12 @@ const (
 	// GitHub provider config
 	keyBaseURL = "base_url"
 	keyOwner   = "owner"
+	keyToken = "token"
+
+	// GitHub credentials environment variable names
+	envToken = "GITHUB_TOKEN"
+
+	fmtEnvVar = "%s=%s"
 )
 
 // TerraformSetupBuilder builds Terraform a terraform.SetupFn function which
@@ -85,6 +92,11 @@ func TerraformSetupBuilder(version, providerSource, providerVersion string) terr
 			ps.Configuration[keyOwner] = v
 		}
 
+		// set environment variables for sensitive provider configuration
+		ps.Env = []string{
+			fmt.Sprintf(fmtEnvVar, envToken, githubCreds[keyToken]),
+		}
+
 		return ps, nil
 	}
 }