bk(refactor): use bk plugins for the DRA secrets

[v1v]

What does this PR do?

Remove secrets from pre-command
Use BK plugins

Why is it important?

explicitness versus obfuscation

Checklist

• I have read and understood the pull request guidelines of this project.
• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works
• I have added an entry in ./changelog/fragments using the changelog tool
• I have added an integration test or an E2E test

Disruptive User Impact

How to test this PR locally

In the CI

• https://buildkite.com/elastic/elastic-agent-package/builds/8295

DRA_VERSION="9.3.0"
DRA_WORKFLOW="snapshot"
MANIFEST_URL="https://snapshots.elastic.co/9.3.0-d90d0809/agent-package/agent-artifacts-9.3.0-SNAPSHOT.json"
DRA_DRY_RUN="--dry-run"

• https://buildkite.com/elastic/elastic-agent-package/builds/8296

DRA_VERSION="9.3.0"
DRA_WORKFLOW="staging"
MANIFEST_URL="https://snapshots.elastic.co/9.3.0-d90d0809/agent-package/agent-artifacts-9.3.0-SNAPSHOT.json"
DRA_DRY_RUN="--dry-run"

Related issues

Questions to ask yourself

• How are we going to support this in production?
• How are we going to measure its adoption?
• How are we going to debug this?
• What are the metrics I should take care of?
• ...

[mergify]

This pull request does not have a backport label. Could you fix it @v1v? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-./d./d is the label that automatically backports to the 8./d branch. /d is the digit
• backport-active-all is the label that automatically backports to all active branches.
• backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
• backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.

[elasticmachine]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: d2128c3

Failed CI Steps

• Unit tests - fips140=only Ubuntu 22.04
• Windows:2022:amd64:sudo
• Windows:2025:amd64:sudo
• Ubuntu:2404:amd64:sudo
• Win2022:sudo:default
• Win2022:sudo:fleet
• Win2022:sudo:fleet-endpoint-security
• Win2022:sudo:fleet-privileged
• Win2022:sudo:install-uninstall
• Win2022:non-sudo:default
• Win2025:sudo:default
• Win2025:sudo:fleet
• Win2025:sudo:fleet-endpoint-security
• Win2025:sudo:fleet-privileged
• Win2025:sudo:install-uninstall
• Win2025:non-sudo:default
• x86_64:non-sudo: default
• x86_64:sudo: default
• x86_64:sudo: fleet
• x86_64:sudo: fleet-endpoint-security
• x86_64:sudo: fleet-airgapped
• x86_64:sudo: fleet-airgapped-privileged
• x86_64:sudo: fleet-privileged
• x86_64:sudo: fleet-upgrade-to-pr-build
• x86_64:sudo: install-uninstall
• x86_64:sudo: fqdn
• x86_64:sudo: deb
• x86_64:sudo: container
• arm:sudo: default
• arm:sudo: fleet
• x86_64:non-sudo: default
• x86_64:sudo: default
• x86_64:sudo: fleet
• x86_64:sudo: fleet-endpoint-security
• x86_64:sudo: fleet-airgapped
• x86_64:sudo: fleet-airgapped-privileged
• x86_64:sudo: fleet-privileged
• x86_64:sudo: fleet-upgrade-to-pr-build
• x86_64:sudo: install-uninstall
• x86_64:sudo: deb
• x86_64:sudo: container
• x86_64:sudo:rpm
• v1.27.16:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.28.15:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.29.14:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.30.0:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.31.0:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.32.0:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.33.0:amd64:basic,slim,complete,service,elastic-otel-collector
• v1.27.16:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• v1.28.15:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• v1.29.14:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• v1.30.0:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• v1.31.0:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• v1.32.0:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• v1.33.0:amd64:wolfi,slim-wolfi,complete-wolfi,elastic-otel-collector-wolfi
• fips:x86_64:sudo-true:fleet
• fips:arm64:sudo-true:fleet

History

cc @v1v

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b feature/no-more-precommand-for-secrets-used-by-dra upstream/feature/no-more-precommand-for-secrets-used-by-dra
git merge upstream/main
git push upstream feature/no-more-precommand-for-secrets-used-by-dra