nconf-secrets is a storage extension that support loading docker swarm secrets.
'use strict';
const nconf = require('nconf');
require('@vanderlaan/nconf-secrets');
nconf.argv()
.env('__')
.use('dockersecrets', { lowerCase: true, parseValues: true, separator: '__' });
console.log(nconf.get('http__shared_secret'));For example docker swarm will place secrets on the container at a given path.
nconf-secrets will look at the default path used by docker swarm however if you configured your swarm to use a different path for secrets you can pass said path into nconf-secrets through the secretsDir option.
'use strict';
const nconf = require('nconf');
require('@vanderlaan/nconf-secrets');
nconf.argv()
.env('__')
.use('dockersecrets', {
lowerCase: true,
parseValues: true,
separator: '__',
secretsDir: '/my/secrets/path',
});
console.log(nconf.get('http__shared_secret'));After requiring nconf-secrets its storage will automagically be registered to nconf.
nconf-secrets supports a number of optional parameters:
| Parameter | Description |
|---|---|
| lowerCase | Converts the secret keys to lower case. Default false |
| parseValues | Attempt to parse well-known values (e.g. 'false', 'true', 'null', 'undefined', '3', '5.1', and JSON values) into their proper types. If a value cannot be parsed, it will remain a string. Default false |
| separator | Defines what the character nconf-secrets should use to denote a nested value. Default undefined (disabled) |
| secretsDir | The path to the secrets directory. Default to Docker Swarm default location |
nconf-secrets has a full test suite to ensure proper behaviours. To run them just use:
npm test
This will output the tests results as well as the code coverage. The code coverage is also reported as an HTML document found under the ./reports folder.
The JavaScript Style Guide is used for this project so you must comply to that rule set. You can verify your changes are in compliance via the npm run lint command.
Bug reports and pull requests are welcome. To ensure your contributions are accepted please read and oblige by our Contribution Guide. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the Contributor Covenant code of conduct.
The idea for this plugin came from Gallo Feliz. How to read the docker secrets came from node-docker-secrets