Usage of docker secrets? Variables not loading properly
Is it possible to use docker (swarm) secrets with hoarder? I’m trying to configure my containers using Docker Swarm secrets and Hoarder, but I’m running into issues. My usual setup for containers includes environment variables in my docker-compose.yml like:
OAUTH_CLIENT_ID_FILE=/run/secrets/hoarder_oauth_client_id
OAUTH_CLIENT_ID=file:///run/secrets/hoarder_oauth_client_id
and defining them using the following:
*secrets:
hoarder_oauth_client_id:
file: ${DOCKERDIR}/secrets/hoarder_oauth_client_id
With this setup, the variables don’t seem to load at all.
However, when I use:
*OAUTH_CLIENT_ID=/run/secrets/hoarder_oauth_client_id *(without _FILE)
…the container starts, and I can manually cat the correct value inside the container. However, Hoarder does not seem to load the actual secret value, only the path (/run/secrets/...) in the environment variables.
A potential workaround I considered was using a custom start command to cat the secret file and inject it into the environment, but this approach also failed.
Has anyone encountered a similar issue and found a working solution or workaround? Would it make sense to open an issue on GitHub regarding this?
OAUTH_CLIENT_ID_FILE=/run/secrets/hoarder_oauth_client_id
OAUTH_CLIENT_ID=file:///run/secrets/hoarder_oauth_client_id
and defining them using the following:
*secrets:
hoarder_oauth_client_id:
file: ${DOCKERDIR}/secrets/hoarder_oauth_client_id
With this setup, the variables don’t seem to load at all.
However, when I use:
*OAUTH_CLIENT_ID=/run/secrets/hoarder_oauth_client_id *(without _FILE)
…the container starts, and I can manually cat the correct value inside the container. However, Hoarder does not seem to load the actual secret value, only the path (/run/secrets/...) in the environment variables.
A potential workaround I considered was using a custom start command to cat the secret file and inject it into the environment, but this approach also failed.
Has anyone encountered a similar issue and found a working solution or workaround? Would it make sense to open an issue on GitHub regarding this?
