#1907·kamal

Feature Request: Add 1Password Environments support to the existing 1password adapter

Author: njoguamosCreated Jul 4, 2026Updated Jul 4, 2026

The existing 1password adapter only supports vault items via --account and --from flags. 1Password Environments (currently in beta) allow one to organize and manage project’s environment variables, separately from the rest of the items in their 1Password vaults.

I have found this approach to be way cleaner than the vault method.

Image

The items in an environment can be accessed via CLI

bash
op environment read <environment-id>

Proposal

Add an --environment flag to the 1password adapter as an alternative to --account + --from.

bash
kamal secrets fetch --adapter 1password --environment <environment-id> SECRET1 SECRET2

Current Work Around

Currently, I am using 1Password Environments with a workaround.

dontenv
SECRETS="$(op environment read <environment-id> | jq -Rn '[inputs | capture("^(?<k>[^=]+)=(?<v>.*)$") | {(.k): .v}] | add | @json')"

# GitHub registry access token
KAMAL_REGISTRY_PASSWORD="$(kamal secrets extract KAMAL_REGISTRY_PASSWORD $SECRETS)"

#...