mirror of
https://github.com/containers/podman.git
synced 2025-08-06 19:44:14 +08:00
document available secret drivers
[NO NEW TESTS NEEDED] Signed-off-by: Christian Hörtnagl <christian.hoertnagl@univie.ac.at>
This commit is contained in:

committed by
christian2

parent
7836401c8f
commit
896cab6120
@ -24,7 +24,7 @@ Secrets can also be used to store passwords for `podman login` to authenticate a
|
||||
|
||||
#### **--driver**, **-d**=*driver*
|
||||
|
||||
Specify the secret driver (default **file**, which is unencrypted).
|
||||
Specify the secret driver (default **file**).
|
||||
|
||||
#### **--driver-opts**=*key1=val1,key2=val2*
|
||||
|
||||
@ -48,6 +48,34 @@ If existing secret with the same name already exists, update the secret.
|
||||
The `--replace` option does not change secrets within existing containers, only newly created containers.
|
||||
The default is **false**.
|
||||
|
||||
## SECRET DRIVERS
|
||||
|
||||
#### file
|
||||
|
||||
Secret resides in a read-protected file.
|
||||
|
||||
#### pass
|
||||
|
||||
Secret resides in a GPG-encrypted file.
|
||||
|
||||
#### shell
|
||||
|
||||
Secret is managed by custom scripts. An environment variable **SECRET_ID**
|
||||
is passed to the scripts (except for **list**), and secrets are communicated
|
||||
via stdin/stdout (where applicable). Driver options **list**, **lookup**,
|
||||
**store**, and **delete** serve to install the scripts:
|
||||
|
||||
```
|
||||
[secrets]
|
||||
driver = "shell"
|
||||
|
||||
[secrets.opts]
|
||||
list =
|
||||
lookup =
|
||||
store =
|
||||
delete =
|
||||
```
|
||||
|
||||
## EXAMPLES
|
||||
|
||||
```
|
||||
|
Reference in New Issue
Block a user