Use secret_key and secret_value in Variables controller

1 files changed, 7 insertions, 2 deletions

diff --git a/app/controllers/projects/variables_controller.rb b/app/controllers/projects/variables_controller.rb
index 7eb509e2e64..3cbfe7b3cc1 100644
--- a/app/controllers/projects/variables_controller.rb
+++ b/app/controllers/projects/variables_controller.rb
@@ -32,10 +32,15 @@ class Projects::VariablesController < Projects::ApplicationController
   end
 
   def variables_params
-    params.permit(variables_attributes: [*variable_params_attributes])
+    filtered_params = params.permit(variables_attributes: [*variable_params_attributes])
+    filtered_params["variables_attributes"].each do |variable|
+      variable["key"] = variable.delete("secret_key")
+      variable["value"] = variable.delete("secret_value")
+    end
+    filtered_params
   end
 
   def variable_params_attributes
-    %i[id key value protected _destroy]
+    %i[id secret_key secret_value protected _destroy]
   end
 end