Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password Secrets Automation

blog.1password.com

Post reply on HN
Print view View original

1–10 of 186 posts

Re: 1Password Secrets Automation

#2

Post by patwolf »

This looks interesting. We use 1Password, and I always thought it would be useful to programmatically pull values out and use in our cloud infrastructure.

Currently we end up using the secret managers available in AWS or GCP, which seems pretty half baked. In GCP, for example, secrets are stored at a project level. It's not unusual to have certain secrets that are needed by more than one project, which means they get duplicated. The granularity also prevents me from controlling which secrets are visible to a given user.

I'd love to have one centralized source of truth for all infrastructure secrets.

Re: 1Password Secrets Automation

#3

Post by nops »

patwolf wrote: post #2

This looks interesting. We use 1Password, and I always thought it would be useful to programmatically pull values out and use in our cloud infrastructure. Currently we end up using the secret managers available in AWS or GCP, which seems pretty half baked. In GCP, for example, secrets are stored at a project level. It's not unusual to have certain secrets that are needed by more than one project, which means they get…

https://www.vaultproject.io/

Re: 1Password Secrets Automation

#5

Post by outworlder »

patwolf wrote: post #2

This looks interesting. We use 1Password, and I always thought it would be useful to programmatically pull values out and use in our cloud infrastructure. Currently we end up using the secret managers available in AWS or GCP, which seems pretty half baked. In GCP, for example, secrets are stored at a project level. It's not unusual to have certain secrets that are needed by more than one project, which means they get…

This is why we use Vault. Until recently, there was no good option to host it, so you had to manage it.

It's good to have independent competition in this space.

Re: 1Password Secrets Automation

#6

Post by bsamuels »

Here's to hoping there's finally a Hashicorp Vault competitor. It's shocking that the only mature option for runtime secret delivery is Vault after all these years.

Some companies have created 'competitors', but they aren't even remotely mature (google secrets manager, aws secret manager, etc)

Re: 1Password Secrets Automation

#7

Post by thehermit »

I've been deep in the k8s on raspberry pi's world recently and ran across someone who was doing this with Bitwarden for their personal setup. I use 1password as my password manager of choice and was immediately trying to find ways to do something similar using the 1password CLI, so this is very convenient timing.

Re: 1Password Secrets Automation

#8

Post by bombcar »

bsamuels wrote: post #6

Here's to hoping there's finally a Hashicorp Vault competitor. It's shocking that the only mature option for runtime secret delivery is Vault after all these years. Some companies have created 'competitors', but they aren't even remotely mature (google secrets manager, aws secret manager, etc)

The two you mentioned have ingrained business reasons to only work with "their" ecosystem. You need someone from outside to have an incentive to work with all.
Post reply on HN