Skip to content

v1.11.0 — 1Password secrets on every start, via ddev-1pass

Latest
Latest

Choose a tag to compare

View all tags
@pianomansam pianomansam released this 25 Sep 13:39
v1.11.0
e2d2b53
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Installing or upgrading ddev-rdg now also installs ddev-1pass. With it, every ddev start resolves the repo's op:// references into env files DDEV loads into the containers, the way dkr up did through op run.

  • Nothing to do for a dkr-era repo: the op:// lines in its .env are picked up as they are. Once dkr goes away, move them to a committed .ddev/secrets.env.
  • It never blocks the start. If op is missing, signed out or offline, the start warns and carries on with the last good secrets. ddev 1pass-secrets is the strict refresh.
  • Needs the 1Password CLI (brew install 1password-cli) with the app's CLI integration turned on, but only in repos that have op:// references.

Upgrading

DDEV 1.25.4 or newer is now required (was 1.24.8). It's the first release that loads the labeled env files the secrets are written to. brew upgrade ddev.

ddev add-on get Rapid-Development-Group/ddev-rdg
git add .ddev && git commit
ddev restart

DDEV skips a dependency that's already installed, so later ddev-1pass releases need their own ddev add-on get Rapid-Development-Group/ddev-1pass.

Assets 2
Loading