Secrets management using Doppler on Gitpod

Automate your Doppler secrets & use them in your developer workflow on a Cloud Dev Environment - Gitpod

Setting it up

Doppler Service Token

1. Create a Doppler account and a project.

2. Create a Doppler service token and add it to Gitpod Environment variables.

3. Start a Gitpod workspace:

   

Doppler CLI

Gitpod is an ephemeral environment, so we need to install the Doppler CLI on every workspace start, but we can do it more smartly with Gitpod init tasks & Gitpod Dockerfile.

Example of a .gitpod.Dockerfile file

FROM gitpod/workspace-full:latest

# Install & configure Doppler CLI
RUN (curl -Ls --tlsv1.2 --proto "=https" --retry 3 https://cli.doppler.com/install.sh || wget -t 3 -qO- https://cli.doppler.com/install.sh) | sudo sh

Example of a .gitpod.yml file

image:
  file: .gitpod.Dockerfile

tasks:
  - name: Doppler
    command: |
      doppler setup

Note: To speed up Gitpod workspace startup times, you can configure Gitpod prebuilds to build the Docker image before the first workspace start.

Add Secrets to Doppler

Doppler setup

doppler setup

Add Doppler secrets to your project

Use Doppler secrets in your Gitpod workspace

Print all Doppler secrets

doppler secrets --raw

Print a specific Doppler secret

doppler run --command='echo $SENDGRID_API_KEY'

Recommended Doppler Resources

• Doppler CLI
• Doppler Service Tokens
• Doppler Secrets
• Doppler Projects

Recommended Gitpod Resources

• Gitpod workspaces tasks
• Environment variables
• Custom Docker Image
• Config .gitpod.yml