Agent forwarding in VS Code
The ssh agent forwarding documentation states: The IdentityAgent takes precedence over the SSH_AUTH_SOCK environment variable, so you may want to modify the ~/.ssh/config file for your remote workstation so the IdentityAgent setting is only applied if you're not in an SSH shell. Match host * exec "test -z $SSH_TTY" IdentityAgent "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock" This advice works for a normal terminal session (e.g. iTerm -> ssh) but it does not work in the Visual Studio Code integrated terminal. The reason is that VS Code does NOT set the `SSH_TTY` environment variable, so this doesn't match, and so the terminal doesn't use the 1Password agent. Perhaps the better suggestion would be to test for an ssh client like so? Match host * exec "test -z '$SSH_CLIENT'" I can confirm this works both from iTerm and VS Code.
CLI script for migration from .com to .eu
When switching regions as documented in https://support.1password.com/regions/ there are certain limitations: Files can’t be copied across regions. To copy a Document item, download the file to your computer, then upload it to the new account. To copy an item with an attached file, download the file to your computer, remove the attached file from the item, copy the item to the new account, and add the file attachment back to the copied item. Items with custom icons can’t be copied across regions. Edit the item to remove the custom icon, copy the item to the new account, and add the custom icon back to the copied item. Items with related item links can be copied, but you’ll need to relink items after you copy them. Has anyone made a smart script for the op commandline tool to detect which items are affected by the above limitations? Or does the app reliably complain if it can't copy 1:1 from .com to .eu?
IntelliJ IDEA Git plugin not authenticating
When I attempt to push from IntelliJ (via the Git plugin), the 1Password authentication prompt doesn't appear, and eventually the push fails with: sign_and_send_pubkey: signing failed for ED25519 "SSH Key" from agent: communication with agent failed git@github.com: Permission denied (publickey). fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. When I open a terminal and authenticate IntelliJ manually, only then can I actually push anything. According to the 1Password ssh-agent docs, IntelliJ should work, but it's not. OS: NixOS 24.11 IntelliJ version: IntelliJ IDEA 2024.3.2.2 (Ultimate Edition) Build #IU-243.23654.189 1Password version: 8.10.48 op version: 2.30.2 Command IntelliJ git plugin runs for pushing (I figured it might be useful because IntelliJ adds some options to it): git -c credential.helper= -c core.quotepath=false -c log.showSignature=false push --progress --porcelain origin refs/heads/main:main
Cannot connect connect-server to 1password from k8s
Hello. I have a problem with running 1Password operator in k8s cluster. Onepassword-connector does not connect to the server at all. First I had problems with onepassword-credentials.json being fetched by the connector-api and connector-sync containers if they were declared as: env: - name: OP_SESSION valueFrom: secretKeyRef: name: op-credentials key: 1password-credentials.json So I passed them via volumes / volumeMounts and defined the variable like this: volumes: - name: credentials secret: secretName: op-credentials (...) env: - name: OP_SESSION value: /home/opuser/.config/1password-credentials.json volumeMounts: - mountPath: /home/opuser/.config name: credentials readOnly: true Here I put my code to make it clear how I create the deployment: Gitlab Unfortunately I still can't connect to the server, and on the page: https://my.1password.com/developer-tools/infrastructure-secrets/connect/{connect_id} There is no information about the connection of my connect server, it only says "Not yet deployed" Neither the connect-api container nor the connect-sync inside the onepassword-connect pod log any errors. Only errors I have are for operator and OnePasswordItem, which is: 2025-02-17T20:31:08Z ERROR Reconciler error {"controller": "onepassworditem", "controllerGroup": "onepassword.com", "controllerKind": "OnePasswordItem", "OnePasswordItem": {"name":"example","namespace":"onepassword"}, "namespace": "onepassword", "name": "example", "reconcileID": "a1ba0a9c-7388-454e-9ce6-074cb6621e5c", "error": "Failed to retrieve item: Get \"http://onepassword-connect:8080/v1/vaults?filter=title+eq+%22Development%22\": net/http: invalid header field value for \"Authorization\""} sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:329 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2 /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227 Could I ask for help in finding the problem? MarPi82
1Password CLI Docker Image Update for Vulnerabilities
I've been working on a minified Ubuntu base image with 1Password CLI pre-installed so I can use it as a base for some homelab projects. The only thing is I'm not able to resolve some of the vulnerabilities present in the final image because they are introduced by 1Password CLI's use of older versions of Golang / modules in Golang. Will the CLI be updated? Ideally it would be great for the official 1Password CLI docker image could be auto updated... As detected by Docker Scout, the latest 1Password CLI has these vulnerabilities, all of which are fixable with updates: CVE-2024-45337, CVE-2024-45338, CVE-2024-45341, CVE-2024-45336, CVE-2025-22866
Trouble getting document items in Kubernetes with 1P Connect Operator
Hey everyone, I'm trying to get a document out of 1P and into a k8s secret with the Connect Operator, version 1.8.1. I can get Login items but not Document items, even though there seems to be a discussion about this exact topic stating that Documents are supported as of version 1.3.0. Does anyone else have experience with this? --- apiVersion: onepassword.com/v1 kind: OnePasswordItem metadata: name: config-file-dot-yaml namespace: default spec: itemPath: "vaults/dev/items/config-file.yaml" This is the OnePasswordItem I have. The Document config-file.yaml is in the vault dev, and kubectl describe secret config-file-dot-yaml returns an event of "No items found with identifier 'config-file.yaml' " Is there any examples out there of getting the document? Thanks!
Trouble signing git commits from docker container
I am trying to set up a Linux dev container on my Windows machine. I am using VSCode Dev Containers which is doing some SSH magic that was able to get unsigned git commits to work. However, when I try to make signed commits, I get the following error: `error: cannot run [USER_HOME_DIRECTORY]\AppData\Local\1Password\app\8\op-ssh-sign.exe: No such file or directory` I saw this this other community post of a similar nature. I tried my best to follow along by: Set `SSH_AUTH_SOCK` environment variable; this didn't have explicit instructions for Windows Remove `[gpg "ssh"]` from `.git_config` Rebuild the docker image But doing so also did not resolve the issue, instead bringing up this new error: `error: Couldn't find key in agent?` Would someone be able to help me?