opsgang/credstash repository overview

⁠opsgang/credstash

... for systems such as RancherOS or CoreOS - use this container to emulate the credstash cmd line tool to manage secrets in aws

Images come with labels showing provenance and credstash version - use docker inspect to see.

See [more about credstash here] 1⁠.

⁠docker tags

3 types

• 'stable' - indicates the last built version that passed testing.

• timestamp format (the time docker image was built) e.g. opsgang/credstash:20170207223534

• x.y.z format credstash version e.g. opsgang/credstash:1.13.2

⁠github

https://github.com/opsgang/docker_credstash⁠

⁠installing

# ... replace /in/my/PATH below with somewhere in your $PATH
docker pull opsgang/credstash:stable # or use x.y.z version as required.
wget https://github.com/opsgang/docker_credstash/raw/master/.examples/credstash -O /in/my/PATH/credstash
chmod a+x /in/my/PATH/credstash

⁠running

# ... run like credstash cli
credstash --region us-east-1 --table my-table get MY_SECRET # ... or whatever else you need to do.

Note that the credstash cmd is running within a container, so there are caveats when it comes to making AWS_* env vars available to the container if you need to run against a specific account.

See README in .examples dir⁠ for how to use $DOCKER_OPTS to get around those caveats.

⁠building

master branch built at shippable.com