Forum Discussion
[16,17,20,37,38] Support for both versions in scripts
OK, here is the first public version: https://github.com/tmatilai/direnv-1password
I'm more than happy to pass the ownership to you when things are a bit more stable. :)
I guess the OS env var issue has to be addressed in some way or the other. That can lead to hard-to-debug problems now. I'm also planning to add opt-in sign-in support. More suggestions and comments from everyone are of course warmly welcome.
With Terraform and other secrets, I'm happy to have multiple options available. All the improvements in 1Password are very nice, and of course can have impact on the setup. But of course the aim is that less and less secrets are needed on the workstations at all, and deployments, inter-service authentication, etc. are handled automatically. Still there will always be some personal secrets needed.
The main issue with op run (or aws-vault which we had to use before Terraform supported AWS SSO natively) is that it is extra wrapper, which has to be remembered to type or scripted, and one extra component to debug and track issues with versions etc. Especially for a fast growing organisation. But let's see how things evolve. :)