How do I pass secrets from Vault to a docker container I'm running?

Question

Docker

If I store secrets in Vault, and for example I have an image that needs to be passed a password from, for example, postgres to run.
Alternatively, I can store my secrets in an env file and pass them later when starting the container via --env-file.
Tell me, is it possible to somehow do the same with vault, when starting the container, read the secrets from the vault?

Answer 1

The question is interesting! As far as I know, there is no simple, generally accepted way, unlike Kubernetes for example.
Read:
- envconsul https://discuss.hashicorp.com/t/secrets-for-docker...
- https://www.katacoda.com/courses/docker-production... - to be honest, I didn't understand do they reach integration
- https://www.usenix.org/sites/default/files/confere... - discussion of the problem and potential solutions