What is the best way to add the secrectless.yml file to the docker container?

LouisLouisLouL · February 11, 2020, 1:09am

Hello, I was wondering if there is a better way to provide the docker container with the secretless.yml file?
The following steps are how I was able to provide the docker container with the secretless.yml file. Is there a better way?

docker pull cyberark/secretless-broker
docker run [options for the container] -it cyberark/secretless-broker [options for secretless-broker]
ex:
docker run --network host -it cyberark/secretless-broker -debug

Step 2 will fail to run the container create due to no secretless.yml file found, but will create a container

docker ps -a
identify the docker id of the container created
place copy of sectetless.yml file in directory shared by host pc and docker engine default VM (c/Users)
change the directory of the terminal to the shared directory (cd /c/Users)
docker cp secretless.yml containerID:/secretless.yml
docker start -ai containerID
secretless broker runs and works.

dane · February 11, 2020, 7:08pm

Hi LouisLouisLouL:

Can you try copying the secretless.yml file to your current directlry, and running the docker run ... command with the volume mount option -v ./secretless.yml:/secretless.yml? e.g.:

docker run --network host -it -v ./secretless.yml:/secretless.yml cyberark/secretless-broker -debug

This option should map the secretless.yml in the currentl directory to the root path (’/’) in your container.

dane · February 11, 2020, 1:40pm

I should have also mentioned, and I know this is outside the scope of your original question, but… one option you can consider at some point (if you haven’t looked into it already) would be to organize your container setup using Docker Compose. For an example, see:

github.com

cyberark/secretless-broker/blob/master/test/connector/tcp/mssql/docker-compose.yml#L14-L21


secretless:
  image: secretless-broker
  ports:
    - 2223:2223
  volumes:
    - ./secretless.yml:/secretless.yml
  depends_on:
    - mssql

One nice thing about Docker Compose is that it creates Docker “services” with names that you can use e.g. with curl on the command line (i.e. using the service name in place of a hostname). For an example of this, look at the embedded curl command using the app service here:

github.com

cyberark/secretless-broker/blob/master/test/connector/tcp/mssql/test#L11


#!/bin/bash -e


echo -e "\nRunning tests\n"


docker-compose exec -T \
  test bash -c "go test -v ./test/connector/tcp/mssql"


echo ""
echo 'Creating pet:'
echo '{"name": "Mr. Init"}'
docker-compose exec -T test curl -s -d '{"name": "Mr. Init"}' -H "Content-Type: application/json" app:8080/pet


echo "Retrieving pet:"
docker-compose exec -T test curl -s app:8080/pets
echo ""
echo ""

LouisLouisLouL · February 11, 2020, 7:09pm

Thank you for the information, the command worked!!

LouisLouisLouL · February 11, 2020, 7:10pm

Thank you for the suggestion on docker-compose, I’ll look into that. Thank you!!

system · February 18, 2020, 7:11pm

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.