locket 0.17.3

Helper tool for secret injection as a process dependency
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

---
name: volume-demo
services:
    demo:
        user: 1000:1000
        image: busybox
        command:
            - "sh"
            - "-c"
            - "cat /run/secrets/locket/template && cat /run/secrets/locket-bws/secret && cat /run/secrets/locket-default/template && echo && sleep 120"
        volumes:
            - locket-volume-op:/run/secrets/locket:ro
            - locket-volume-bws:/run/secrets/locket-bws:ro
            - locket-volume-default:/run/secrets/locket-default:ro
volumes:
    locket-volume-op:
        driver: bpbradley/locket:plugin # Can use locket if installed with --alias locket
        driver_opts:
            user: 1000:1000
            provider: op
            op-token: file:/etc/locket/tokens/op
            secret.template: "{{ op://Mordin/TestKey/private key?ssh-format=openssh }}"
    locket-volume-bws:
        driver: bpbradley/locket:plugin
        driver_opts:
            user: 1000:1000
            provider: bws
            bws-token: file:/etc/locket/tokens/bws
            secret: secret={{814d7d9a-54a5-47a0-afc0-b3a7015213c4}}
    locket-volume-default:
        driver: bpbradley/locket:plugin
        driver_opts:
            # No provider selected, as it will use the defaults I set in /etc/locket/locket.toml
            user: 1000:1000
            secret.template: "{{ op://Mordin/TestKey/private key }}"