DopplerHQ / cli

The official CLI for interacting with your Doppler secrets and configuration.
https://docs.doppler.com
Apache License 2.0
219 stars 44 forks source link

[FEATURE] Support kubernetes secrets as a fallback #245

Open stephenlacy opened 3 years ago

stephenlacy commented 3 years ago

I implemented a basic version of using kubernetes secrets as a fallback method here: https://github.com/stevelacy/doppler-cli/commit/56e6cd100cf3e188017d5b90ea212e9d3d55ec06

Usage in a docker container:

ENTRYPOINT doppler run --kubernetes-secrets-fallback --kubernetes-namespace app -- "/app/bin/$PACKAGE"

The main premise is on a kubernetes cluster the pods are auto-scaling, as such they can and will restart at any time. If for any reason doppler services are unavailable then 100% of the restarting pods will fail and will cause a crash loop.

Not sure if there are plans of supporting fallbacks as modules, if so having an AWS KMS and kubernetes secret fallback would be interesting.