Skip to main content
May 6, 2022
Question

Is it possible to use 1password CLI on CI/CD scripts?

  • May 6, 2022
  • 9 replies
  • 1193 views

Hello!

I use the CLI on my local environment, putting my password when prompted.

There is a way to use it on a fully automated CI/CD script?

I've tried, but when I run "op account add --address example.1password.com --email example@example" the password is prompted.

Do you have already used the CLI for that purpose?

Thank you for the help :)


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

9 replies

XIII
May 7, 2022

Yes, with a 1Password Connect server.

May 9, 2022

Great!

I'll try it.

Thanks XIII !

May 11, 2022

Hey @7ieroc, sorry for the late response.

Indeed, 1Password Connect is the way to go here. Please let us know how onboarding on using Connect goes for you, and do not hesitate to reach out in the Secrets Automation forum, if you encounter any issues: https://1password.community/categories/secrets-automation
We're currently also exploring 1Password service accounts, which should solve this problem without needing to host Connect in your infrastructure. Stay tuned for updates about this!

Best,
Horia

Sadia_A1P
1Password Employee
June 16, 2022

Hi @7ieroc ,

I'm Sadia, a Product Manager at 1Password, and have some news that may be interesting to you. I am looking for some developers and administrators that would be interested in chatting with me about a new feature our team has been working on: Service Accounts. Earlier this year, we introduced the CLI 2.0, where users can use “run” and “inject” commands to substitute secret references for secrets stored in 1Password vaults. With our new Service Account capabilities, organizations can use a separate non-user account to control and manage access to secrets without deploying additional services like Connect.

We are currently building service accounts to address use cases like yours and want to understand your pain-points and experiences with secrets management, and gather some feedback.

If you are interested, please feel free to reach out to me at sadia.azmal@agilebits.com or sign-up for a 30 minute slot on Calendly. I look forward to hearing from you :)

July 6, 2022

Hi @"Sadia.Azmal_1P" , Calendly signed me up with Dennis Kromhout van der Meer.
I'm happy to speak with you also.
T;DR: I'm building a new CI CD toolchain and we are happy Enterprise customers, so I prefer to avoid the conventional Hashi vault route.

July 6, 2022

Hi @"Sadia.Azmal_1P" , I completed the application for Service Account access and I wanted to confirm that we have sent the email request to

team at mailto:dev-products@agilebits.com to activate the Service Account feature for your team

Sadia_A1P
1Password Employee
July 6, 2022

Hi @sureifyBlaise,
Thank you for reaching out! I will be in on that call so I am excited to speak with you too. Yes I did receive the email request thank you, everything looks good.

September 23, 2022

Hi @"Sadia.Azmal_1P",

Based on this discussion, it seems like this service account feature, with password-less CLI login is available to trial?

This feature is very much needed at our org! I've sent an email to mailto:dev-products.@agilebits.com requesting access to this feature, but would also be happy to jump on call with you after trailing it to give feedback.

Cheers,

Teghan
Data Architect, Felix Health

1Password Employee
September 30, 2022

Thanks for reaching out! Hope someone already reached out to you. If not, you might still try to message in this thread: https://1password.community/discussion/131233/join-our-beta-test-for-1password-service-accounts-launching-mid-july#latest