feat: add Akeyless secrets manager plugin by Copilot · Pull Request #544 · dmno-dev/varlock

Copilot · 2026-04-02T20:33:55Z

changeset-bot · 2026-04-02T20:34:02Z

🦋 Changeset detected

Latest commit: b9eab94

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@varlock/akeyless-plugin	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/cef91166-4c15-4e67-afae-291d90ab491e Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

philmillman · 2026-04-03T14:33:25Z

@copilot add a docs page

…view listing Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/9f3a323d-52d7-438a-8d31-64c569dc03d0 Co-authored-by: philmillman <3722211+philmillman@users.noreply.github.com>

cloudflare-workers-and-pages · 2026-04-03T14:43:48Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	varlock-website	`bc01bb6`	Apr 07 2026, 05:27 AM

Copilot · 2026-04-03T14:43:57Z

@copilot add a docs page

Added in e6b3bb0. Created plugins/akeyless.mdx docs page with features, installation, API Key auth setup, gateway support, loading secrets (static/dynamic/rotated), Akeyless setup guide, full reference section, troubleshooting, and resources. Also added Akeyless to the sidebar navigation and plugins overview table.

theoephraim

@copilot - check the review comments and adjust accordingly

theoephraim · 2026-04-07T05:14:01Z

packages/plugins/akeyless/src/plugin.ts

+
+const { SchemaError, ResolutionError } = plugin.ERRORS;
+
+const AKEYLESS_ICON = 'simple-icons:akeyless';


this is not a real icon. Just leave it empty if there is no logo available in iconify.

Removed all simple-icons:akeyless references — icon is now left empty across plugin metadata, data types, and resolver function. See bc01bb6.

theoephraim · 2026-04-07T05:17:38Z

packages/varlock-website/src/content/docs/plugins/akeyless.mdx

+DB_PASSWORD=akeyless("/MyApp/DB_PASSWORD")
+
+# Auto-infer secret name from the variable name
+API_KEY=akeyless()


if paths are always longer, does this even make sense?

We should probably add a prefixPath option on the plugin instance (similar to what we have for AWS). This would let us dry up other items, and make this case where we infer the path more usable.

Added pathPrefix option on @initAkeyless() (similar to Vault's pathPrefix and AWS's namePrefix). With a prefix set, akeyless() infers "{pathPrefix}/{ITEM_KEY}" which makes the no-arg case much more practical. See bc01bb6.

theoephraim · 2026-04-07T05:18:27Z

packages/varlock-website/src/content/docs/plugins/akeyless.mdx

+Dynamic secrets generate on-demand credentials (e.g., temporary database credentials, cloud access tokens). Use the `type=dynamic` parameter:
+
+```env-spec title=".env.schema"
+# Fetch a dynamic secret (returns JSON with generated credentials)


If this always returns json, we probably need a way of extracting individual json keys/paths.

In this case we also probably need to make sure we cache the fetched item, in case multiple keys from that json object are needed.

This will be useful for dynamic and rotated keys, but also just useful generally, in case a user is storing json objects in static secrets.

Added JSON key extraction via #key syntax and key= named parameter for all secret types (static, dynamic, rotated). Also added response caching per secret type + path so multiple items extracting different keys from the same secret share a single API call. Pattern matches the Vault plugin's fetchSecretData cache. See bc01bb6.

… extraction, and response caching Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/69e3ce35-9e73-4d8b-a41a-f265fefa8a4d Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

Copilot · 2026-04-07T05:28:12Z

@copilot - check the review comments and adjust accordingly

All three review comments addressed in bc01bb6: removed fake icon, added pathPrefix option, and added JSON key extraction with response caching.

…ror handling, and JSON key extraction Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/9b69a8a3-6372-423e-a2f3-bb9598c8c651 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/9b69a8a3-6372-423e-a2f3-bb9598c8c651 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

Add support for API Key authentication and multiple instances.

pkg-pr-new · 2026-04-07T06:03:30Z

Open in StackBlitz

npm i https://pkg.pr.new/dmno-dev/varlock@544

npm i https://pkg.pr.new/dmno-dev/varlock/@varlock/astro-integration@544

npm i https://pkg.pr.new/dmno-dev/varlock/@varlock/vite-integration@544

npm i https://pkg.pr.new/dmno-dev/varlock/@varlock/akeyless-plugin@544

commit: b9eab94

Initial plan

74336f9

Copilot AI assigned Copilot and theoephraim Apr 2, 2026

Copilot started work on behalf of theoephraim April 2, 2026 20:33 View session

Copilot AI linked an issue Apr 2, 2026 that may be closed by this pull request

[Feature Request] akeyless plugin #381

Open

feat: add Akeyless plugin for loading secrets from Akeyless Platform

4f8d7cc

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/cef91166-4c15-4e67-afae-291d90ab491e Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Add akeyless plugin for secrets management~~ feat: add Akeyless secrets manager plugin Apr 2, 2026

Copilot AI requested a review from theoephraim April 2, 2026 20:44

Copilot finished work on behalf of theoephraim April 2, 2026 20:44

Copilot started work on behalf of philmillman April 3, 2026 14:33 View session

docs: add Akeyless plugin documentation page, sidebar entry, and over…

e6b3bb0

…view listing Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/9f3a323d-52d7-438a-8d31-64c569dc03d0 Co-authored-by: philmillman <3722211+philmillman@users.noreply.github.com>

Copilot finished work on behalf of philmillman April 3, 2026 14:45

Copilot AI requested a review from philmillman April 3, 2026 14:45

theoephraim reviewed Apr 7, 2026

View reviewed changes

Copilot started work on behalf of theoephraim April 7, 2026 05:20 View session

refactor: address review - remove fake icon, add pathPrefix, JSON key…

bc01bb6

… extraction, and response caching Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/69e3ce35-9e73-4d8b-a41a-f265fefa8a4d Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

Copilot AI requested a review from theoephraim April 7, 2026 05:29

Copilot finished work on behalf of theoephraim April 7, 2026 05:29

theoephraim approved these changes Apr 7, 2026

View reviewed changes

Copilot started work on behalf of theoephraim April 7, 2026 05:46 View session

Copilot AI and others added 2 commits April 7, 2026 05:50

refactor: simplify plugin.ts - extract shared helpers for caching, er…

8e3ed59

…ror handling, and JSON key extraction Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/9b69a8a3-6372-423e-a2f3-bb9598c8c651 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

fix: restore detailed error tips for 404/403 responses in handleApiError

6c8f4b5

Agent-Logs-Url: https://github.com/dmno-dev/varlock/sessions/9b69a8a3-6372-423e-a2f3-bb9598c8c651 Co-authored-by: theoephraim <1158956+theoephraim@users.noreply.github.com>

Copilot finished work on behalf of theoephraim April 7, 2026 05:53

Copilot AI requested a review from theoephraim April 7, 2026 05:53

Update Akeyless plugin version to patch

b9eab94

Add support for API Key authentication and multiple instances.

github-actions bot added maintainer core:website labels Apr 7, 2026

theoephraim marked this pull request as ready for review April 7, 2026 06:06


		const { SchemaError, ResolutionError } = plugin.ERRORS;

		const AKEYLESS_ICON = 'simple-icons:akeyless';

Conversation

Copilot AI commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

philmillman commented Apr 3, 2026

Uh oh!

cloudflare-workers-and-pages bot commented Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

Copilot AI commented Apr 3, 2026

Uh oh!

theoephraim left a comment

Choose a reason for hiding this comment

Uh oh!

theoephraim Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

theoephraim Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

theoephraim Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Apr 7, 2026

Uh oh!

pkg-pr-new bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Apr 2, 2026 •

edited

Loading

changeset-bot bot commented Apr 2, 2026 •

edited

Loading

cloudflare-workers-and-pages bot commented Apr 3, 2026 •

edited

Loading

pkg-pr-new bot commented Apr 7, 2026 •

edited

Loading