/* Based on environment {envName}, credentials-enc/{envName}/* are decrypted and stored under credentials/{envName} folder */
task decryptSecrets {

    def deployConfig = getDeployConfig()

    def config = [ projId: deployConfig.project,
                   keyring: "secrets-key-ring",
                   key : 'secrets-enc-key',
                   recursive: false
                  ]

    // live or stag based on task arguments
    def envName = deployConfig.envName

    doLast {
        config.srcPath = "${rootProjDir}/credentials-enc/" + envName
        config.targetPath = "${rootProjDir}/credentials/" + envName

        kmsDecryptSecrets(config)
    }
}