Skip to content

Latest commit

 

History

History
56 lines (36 loc) · 1.98 KB

README.md

File metadata and controls

56 lines (36 loc) · 1.98 KB

Docker OnePassword Secrets Plugin

license

This project provides a Docker plugin to use OnePassword as a secrets provider. It allows Docker containers to securely access secrets stored in OnePassword. The plugin uses the OnePassword Connect API to retrieve secrets and provide them to Docker containers.

Prerequisites

  • OnePassword (Obviously)
  • Docker swarm mode (for using Docker secrets)

Configuration

The plugin can be configured using the following environment variables:

  • OP_CONNECT_HOST: The OnePassword Connect (hostdefault: http://localhost:8080)
  • OP_CONNECT_TOKEN: The OnePassword Connect token
  • OP_VAULT_NAME: The OnePassword vault used for secrets (default: docker)

Installation

  1. Set up the OnePassword Connect and Sync services using Docker Compose, follow the instructions in the OnePassword Connect documentation.

    docker-compose up -d # There is a docker-compose.yml file in the root of this repository

  2. Install the plugin

    docker plugin install mrmarble/opsd:latest OP_CONNECT_HOST=<one password connect api host> OP_CONNECT_TOKEN=<your_token> OP_VAULT_NAME=<vault where secrets are stored>

Usage

  1. Create a secret in OnePassword

    op item create --category=password --title=my-app-secrets --vault=docker 'MY_SECRET[password]=supersecretpassword'

  2. Create a Docker secret using the plugin

    docker secret create --driver mrmarble/opsd:latest -l item=my-app-secrets MY_SECRET

  3. Use the secret in a service

    docker service create --secret MY_SECRET --name my-app my-app-image

License

This project is licensed under the MIT License. See the LICENSE file for details.