Use secret_key and secret_value in Variables controller

1 files changed, 7 insertions, 2 deletions

diff --git a/app/controllers/groups/variables_controller.rb b/app/controllers/groups/variables_controller.rb
index cb8771bc97e..2794d5fe6ec 100644
--- a/app/controllers/groups/variables_controller.rb
+++ b/app/controllers/groups/variables_controller.rb
@@ -35,11 +35,16 @@ module Groups
     end
 
     def group_variables_params
-      params.permit(variables_attributes: [*variable_params_attributes])
+      filtered_params = params.permit(variables_attributes: [*variable_params_attributes])
+      filtered_params["variables_attributes"].each do |variable|
+        variable["key"] = variable.delete("secret_key")
+        variable["value"] = variable.delete("secret_value")
+      end
+      filtered_params
     end
 
     def variable_params_attributes
-      %i[id key value protected _destroy]
+      %i[id secret_key secret_value protected _destroy]
     end
 
     def authorize_admin_build!