Docker Secrets

In some cases we don’t want to directly expose the arguments to the program.

An alternative is to use secret files, which can be loaded via environment variables.

object Configuration {
    val apiKey: String by argument()
}

Arkenv.parse(Configuration, args) {
    +EnvironmentVariableFeature(enableEnvSecrets = true)
}

Normally, the apiKey could be declared by defining an env var API_KEY, but when the enableEnvSecrets flag is set to true, it is also possible to use API_KEY_FILE with the path to the file containing the secret value.

$ export API_KEY_FILE=file_including_api_key.txt

Arkenv loads the file and reads the entire content.

Customization

Docker secrets can be enabled in any of the following ways:

• Argument: --arkenv-env-secrets true
• Env var: ARKENV_ENV_SECRETS=true
• Code: EnvironmentVariableFeature(enableEnvSecrets = true)