docker_credstash

... for systems such as RancherOS or CoreOS - use this container to emulate the credstash cmd line tool to manage secrets in aws

See [more about credstash here] 1.

docker tags

3 types

• 'stable' - indicates the last built version that passed testing.

• timestamp format (the time docker image was built) e.g. opsgang/credstash:20170207223534

• x.y.z format credstash version e.g. opsgang/credstash:1.11.2

installing

# ... replace /in/my/PATH below with somewhere in your $PATH
docker pull opsgang/credstash:stable # or use x.y.z version as required.
wget https://github.com/opsgang/docker_credstash/raw/master/.examples/credstash -O /in/my/PATH/credstash
chmod a+x /in/my/PATH/credstash

running

# ... run like credstash cli
credstash --region us-east-1 --table my-table get MY_SECRET # ... or whatever else you need to do.

Note that the credstash cmd is running within a container, so there are caveats when it comes to making AWS_* env vars available to the container if you need to run against a specific account.

See README in .examples dir for how to use $DOCKER_OPTS to get around those caveats.

building

master branch built at shippable.com

git clone https://github.com/opsgang/docker_credstash.git
cd docker_credstash
git clone https://github.com/opsgang/alpine_build_scripts
./build.sh # adds custom labels to image