Skip to content

Access 1Password vaults and items by UUID #4473

@lucabrunox

Description

@lucabrunox

Is your feature request related to a problem? Please describe.

Currently the 1Password vaults need to be referenced by title, let's say "My Vault". That means when changing title of a vault, then we also need to change the secret stores.

Same goes for the ExternalSecret items.

Describe the solution you'd like

We'd like to reference vaults and items by UUID instead of their title.

Describe alternatives you've considered

The alternative is to use 1Password operator instead of external-secrets, however we'd like to use just one tool.

Additional context

This is the config:

    spec = {
      provider = {
        onepassword = {
          connectHost = "http://onepassword-connect:8080"
          vaults = {
            "abcdefg12345678": 1
          }
          auth = {
            ....
          }
        }
      }
    }

This is the error in the external-secrets logs:

{
  "level": "error",
  "ts": 1740422249.2940955,
  "msg": "Reconciler error",
  "controller": "clustersecretstore",
  "controllerGroup": "external-secrets.io",
  "controllerKind": "ClusterSecretStore",
  "ClusterSecretStore": {
    "name": "one-password-secret-store"
  },
  "namespace": "",
  "name": "one-password-secret-store",
  "reconcileID": "4c1699f6-217d-4132-8e2d-01c9690c1d9d",
  "error": "could not validate provider: Found 0 vaults with title \"abcdefg12345678\"",
  "stacktrace": "sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.20.1/pkg/internal/controller/controller.go:341\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.20.1/pkg/internal/controller/controller.go:288\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.20.1/pkg/internal/controller/controller.go:249"
}

Metadata

Metadata

Assignees

Labels

good first issueGood for newcomerskind/featureCategorizes issue or PR as related to a new feature.

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions