Securely store, share, and access secrets alongside the codebase.
SLV is designed based on the following key principles
- Anyone can add or update secrets, however will not be able to read them unless they have access to the vault
- An environment should have a single identity that will give access to all necessary secrets from any vault shared with it
Download the latest SLV binary from the releases page and add it to your path.
SLV can be installed with brew using the following command on macOS
brew install amagioss/slv/slvWith Shell (MacOs/Linux):
curl -fsSL https://oss.amagi.com/slv/install.sh | shWith PowerShell (Windows):
irm https://oss.amagi.com/slv/install.ps1 | iexWith Shell (MacOs/Linux):
curl -fsSL https://oss.amagi.com/slv/install.sh | sh -s v0.1.7With PowerShell (Windows):
$v="0.1.7"; irm https://oss.amagi.com/slv/install.ps1 | iexYou can also run SLV without installing using Docker:
docker run -it --rm -v $PWD:/workspace ghcr.io/amagioss/slv:latest version$ slv profile new -n amagi
Created profile: amagi$ slv env new service -n alice -e [email protected] --add
Public Key: SLV_EPK_AEAUKAAAAD6XTJCYBCIHYKDPPHQN3YNDEVBOFCOIVDMGESLJFH65KG3VULVBK
Name: alice
Email: [email protected]
Tags: []
------------------------------------------------------------
Env Definition: SLV_EDS_AF4JYNGKJ5FYMMA4YDY7P4R3JOLYPHWDJZWW57U35FBB26MSWV7MQYC3UIUUT5G6IOROHF7P44N5J7XGTWKXQAUBV3LJGUDSUKBA5ESSJL473NNP2KI2KZJRJKXFJ4OS3TDIMC6N3IWG2S6NT5Z5DVKVK3OB6ZL62NB23GMEAQNBGEAIDDXSYQQCEIMOP773BG7UYWB4H3MI64F5PD2OO4XJBXL6HT7XM3PIBRG57MCDVNBLPYZBPX25TSAQB7H4AYAAB777D2YDPOA
Secret Key: SLV_ESK_AEAEKAAATI5CXB7QMFSUGY4RUT6UTUSK7SGMIECTJKRTQBFY6BN5ZV5M5XGF6DWLV2RVCJJSMXH43DJ6A5TK7Y6L6PYEMCDGQRBX46GUQPUIYUQ- To create a vault and share it with the environment
alice, use the following command
$ slv vault new -v test.slv.yaml -s alice
Created vault: test.slv.yaml- To create a K8s compatible vault, use the following command
$ slv vault new -v test.slv.yaml -s alice --k8s production
Created vault: test.slv.yaml$ slv vault put -v test.slv.yaml -n db_password -s "super_secret_pwd"
Added secret: db_password to vault: test.slv.yamlSet the environment variable SLV_ENV_SECRET_KEY to the secret key generated in the previous step
$ export SLV_ENV_SECRET_KEY=SLV_ESK_AEAEKAAATI5CXB7QMFSUGY4RUT6UTUSK7SGMIECTJKRTQBFY6BN5ZV5M5XGF6DWLV2RVCJJSMXH43DJ6A5TK7Y6L6PYEMCDGQRBX46GUQPUIYUQ
$ slv vault get -v test.slv.yaml -n db_password
super_secret_pwdEnsure that the current environment has access to the vault in order to share it with other environments
$ slv vault share -v test.slv.yaml -s bob
Shared vault: test.slv.yamlOnce shared, the other environments can access the vault using their respective secret keys
Some of the integrations that SLV currently supports are:
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent