Feature Request: Add 1Password Environments support to the existing 1password adapter
Author: njoguamosCreated Jul 4, 2026Updated Jul 4, 2026
The existing 1password adapter only supports vault items via --account and --from flags. 1Password Environments (currently in beta) allow one to organize and manage project’s environment variables, separately from the rest of the items in their 1Password vaults.
I have found this approach to be way cleaner than the vault method.
The items in an environment can be accessed via CLI
op environment read <environment-id>Proposal
Add an --environment flag to the 1password adapter as an alternative to --account + --from.
kamal secrets fetch --adapter 1password --environment <environment-id> SECRET1 SECRET2Current Work Around
Currently, I am using 1Password Environments with a workaround.
SECRETS="$(op environment read <environment-id> | jq -Rn '[inputs | capture("^(?<k>[^=]+)=(?<v>.*)$") | {(.k): .v}] | add | @json')"
# GitHub registry access token
KAMAL_REGISTRY_PASSWORD="$(kamal secrets extract KAMAL_REGISTRY_PASSWORD $SECRETS)"
#...Source: basecamp/kamal