Forum Discussion

TerryTPA's avatar
TerryTPA
New Contributor
2 months ago

[GUIDE] 1Password Runtime Secret Injection for Azure Container Apps

This guide outlines a streamlined way to inject environment variables stored as secret reference URIs from 1Password into an Azure Container App (ACA) at runtime. It removes the need for init contain...
CLI
secrets management
TerryTPA's avatar
TerryTPA
New Contributor
2 months ago

If you don’t count the months of using 1Password CLI features in other projects and scouring the docs 😝, it took a couple hours of fighting with the complexities of testing an init container to try to load secrets, then trying to pass secrets to the running container without any temp disk writes via empty file mounts, etc,

I stepped back and thought  ‘op run —env-file’ is what I needed but, somehow, needed to inject a file containing  the secret reference URIs. After remembering I could store and read file content using ‘op read’, it only took about an hour to figure out ACA can’t override ENTRYPOINT, change the Dockerfile, test in a terminal then get the ACA override working, 

It was a great “aha” moment that was only possible thanks to the great 1Password CLI features and documentation.