[Feature Request]: Support Docker Swarm secrets (/run/secrets)
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 8.8k
- Forks
- 491
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 49
Description
Problem description (Describe the problem you would like to solve with this feature request or suggested idea).
Provide support for Docker Swarm secrets mounted at /run/secrets so that sensitive values (for example RI_ENCRYPTION_KEY) can be supplied to RedisInsight containers securely. Today these values must be passed via environment variables or mounted files manually; built-in support to read /run/secrets/<NAME> would simplify secure deployments with Docker Swarm stacks and reduce the risk of accidentally exposing secrets.
How often do you encounter this problem (Describe how frequently this problem occurs).
This issue occurs whenever RedisInsight is deployed to Docker Swarm (or other orchestrators that expose container secrets as files under /run/secrets). It affects users who prefer secrets management over plaintext environment variables for production deployments.
Alternatives considered (Describe any alternative features or products you've considered).
- Continue using environment variables (less secure in some deployment scenarios).
- Mount secret files into the container manually and configure RedisInsight to read from a custom path (works but is manual and error-prone).
- Use external secret management solutions and inject values at runtime (adds operational complexity).
Additional information (Add any other context or details here).
- Example expected behavior: if
/run/secrets/RI_ENCRYPTION_KEYexists and is readable, RedisInsight uses its contents as the encryption key. If not present, fall back to the existing environment variableRI_ENCRYPTION_KEYif set. - This change should be backward-compatible and optional; existing env-var-based workflows must continue to work.
- Path example:
/run/secrets/RI_ENCRYPTION_KEY.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing RI_ENCRYPTION_KEY environment-variable handling and the Docker deployment configuration. Check how a readable /run/secrets/RI_ENCRYPTION_KEY should interact with the existing environment-variable fallback. Done means Docker Swarm secret values work without breaking existing environment-variable workflows, with coverage for both paths.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, typescript
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100