{"id":19748688,"url":"https://github.com/doitintl/secrets-consumer-env","last_synced_at":"2025-04-30T08:33:40.194Z","repository":{"id":40288560,"uuid":"248595271","full_name":"doitintl/secrets-consumer-env","owner":"doitintl","description":"Consume secrets securely from AWS, GCP and Hashicorp Vault secret managers","archived":false,"fork":false,"pushed_at":"2023-02-14T15:48:55.000Z","size":245,"stargazers_count":3,"open_issues_count":4,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-06-19T11:29:50.048Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/doitintl.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-03-19T20:09:53.000Z","updated_at":"2022-11-23T11:15:50.000Z","dependencies_parsed_at":"2024-06-19T11:24:09.016Z","dependency_job_id":"e5e7f5df-a3a2-4830-a279-6d7761b52a59","html_url":"https://github.com/doitintl/secrets-consumer-env","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doitintl%2Fsecrets-consumer-env","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doitintl%2Fsecrets-consumer-env/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doitintl%2Fsecrets-consumer-env/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doitintl%2Fsecrets-consumer-env/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/doitintl","download_url":"https://codeload.github.com/doitintl/secrets-consumer-env/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":224203938,"owners_count":17273019,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-12T02:22:57.441Z","updated_at":"2024-11-12T02:22:58.036Z","avatar_url":"https://github.com/doitintl.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"\n## Secrets Consumer Env\n\nConsume secrets from AWS, GCP or Hashicorp Vault\n\n### Synopsis\n\nThere are a few secret managers that holds secrets, the problem becomes how to consume these secrets\nsecurely.\n\nThe Secrets Consumer Env creates a new shell environment, and fetch the secrets from the secret engine\nadding them to the environment variables on the new shell and then calling the `syscall.execv` which will\nreplace the running process with the given process, that given process will inherit all environment variables.\n\nIn the world of containers, its important that the process running in it should get the PID 1 so\nthat a sig TERM will work properly.\n\nwill have access to the env vars, the operating system / docker container will not have any of the\nsecrets exposed.\n\nThis tool can either run as a standalone outside of kubernetes or using the Kubernetes mutation webhook.\n\nThis tool works with the following secrets managers:\n\n* GCP Secret Manager\n* AWS Secret Manager\n* Hashicorp Vault\n  * Kubernetes backend login (Default)\n  * GCP backend login\n\n### CLI Commands\n\n* `aws`  - enable the AWS Secret Manager\n* `gcp`  - enable the GCP Secret Manager\n* `vault`  - enable the Vault Secret Manager\n\n**Note: The double dash symbol “–-” is used to separate the arguments you want to pass to the command from the secrets-consumer-env arguments.**\n\n**Important: Do not use double-quotes for your command as it will first be evaluated by your shell and not by the secrets-consumer-env.**\n\n### Options\n\n```\n      --config string      config file (default is $HOME/.secrets-consumer-env.yaml)\n  -h, --help               help for secrets-consumer-env\n  -t, --toggle             Help message for toggle\n  -v, --verbosity string   Log level (debug, info, warn, error, fatal, panic (default \"info\")\n```\n\n### SEE ALSO\n\n* [secrets-consumer-env aws](docs/secrets-consumer-env_aws.md)\t - Secrets Consumer for AWS Secret Manager\n* [secrets-consumer-env gcp](docs/secrets-consumer-env_gcp.md)\t - Secrets Consumer for GCP Secret Manager\n* [secrets-consumer-env vault](docs/secrets-consumer-env_vault.md)\t - Fetch and inject secrets from Vault to a given command\n* [secrets-consumer-env version](docs/secrets-consumer-env_version.md)\t - Print the version of Secrets Consumer Env\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdoitintl%2Fsecrets-consumer-env","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdoitintl%2Fsecrets-consumer-env","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdoitintl%2Fsecrets-consumer-env/lists"}