Best way of storing secrets in Karavan dev env

[Luc1412]

Ask a question

I currently struggle on how to handle secrets in my development environment. The 2 most usual ways of handling secrets I found is via env variables (in projects docker-compose) or the application properties. However both files are synced to git.

What is a convenient way of handling my secrets then?

Variant

Web Application

Container Management (if applicable)

Docker

Operating System (if applicable)

MacOS

Version

4.10.2

[mgubaidullin]

You could use .env file on the host and https://docs.docker.com/compose/how-tos/environment-variables/set-environment-variables/#use-the-env_file-attribute

[Luc1412]

How would such setup look like?
I got my .env file in my projects root, a file which isn't tracked in git and so not available in Karavan. How can I get these values now in my projects container at project/docker-compose.yml?

Edit: It seems my new setup with these changes work:
project/docker-compose.yml:

services:
  project:
    image: project
    restart: always
    ports:
      - "8081:8080"
    networks:
      - karavan
    environment:
      EXAMPLE_SECRET_VAR: ${EXAMPLE_SECRET_VAR}

docker-compose.yml:

...
  karavan:
    container_name: karavan
    image: ghcr.io/apache/camel-karavan:4.10.2
    ports:
      - "8080:8080"
    environment:
      ...
    env_file:
      - .env
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
    labels:
      - "org.apache.camel.karavan/type=internal"    
    networks:
      - karavan
 ...

.env:
EXAMPLE_SECRET_VAR=secret

[mgubaidullin]

Or you could use HashiVault