3rd party secrets-engine plugin backends
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
Research direction
No files, tests, or entry points are identified. Review the candidate backend list and voting comments first; completion would require a selected backend and agreed implementation scope, which this issue does not yet specify.
Written by the indexing model from the issue text.
Description
The secrets engine resolves se://<id> references through plugins. Below are candidate backends we're considering, grouped by where they fit in a user's workflow.
Locally-usable backends
Routinely used from a developer's machine, personal/team password managers, or self-hostable secret servers a developer authenticates to with a token.
- 1Password (ships
June 8, 2026 / Docker Desktop 4.77.0delayed -> 4.78.0) - Bitwarden (with Vaultwarden as a self-hosted, API-compatible option)
- LastPass
- HashiCorp Vault
- OpenBao
Cloud-deployment backends
Primarily used by workloads running in a cloud, reading secrets provisioned in that same cloud (IAM role, managed identity, workload identity).
- AWS Secrets Manager
- AWS SSM Parameter Store
- Azure Key Vault
- Google Cloud Secret Manager
Vote for the plugin you want most scroll down and react with 👍 on the comment for that backend. The more reactions a backend gets, the sooner it moves up our list.
Don't see your secret store? Drop a new comment with the backend you'd like supported and a short note on how you use it (personal workstation, CI, production workloads, …).
- Dominant language
- Go
- Stars
- 91
- Forks
- 16
- Avg merge
- 9h 3m
- Merged PRs (30d)
- 24
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from docker/secrets-engine
-
Linux keychain dials a new D-Bus connection per operation, defeating per-entry access confirmation Open
Difficulty 5/5 Over a week Newbie friendliness 42/100
docker/secrets-engine#648 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 65/100
docker/secrets-engine#584 · 1 comment · 1 reaction ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
docker/secrets-engine#551 · 2 comments · 3 reactions ·
-
Dynamic Scopes Open
docker/secrets-engine#393 · 1 assignee ·
-
docker/secrets-engine#316 · 1 assignee ·
All issues in docker/secrets-engine
Similar issues
-
kind/bug needs-triage
Difficulty 1/5 Under an hour Newbie friendliness 72/100
matrixorigin/matrixone#29223 ·
-
needs-acceptance wg/data-plane-networking
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
vllm-project/semantic-router#4024 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
alexgorbatchev/dotfiles#107 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100