1Password: handle injected service accounts.

namespacelabs · Nov 16, 2023 · 8b99ba1 · 8b99ba1
1 parent 8a6e366
commit 8b99ba1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/internal/providers/onepassword/secrets.go b/internal/providers/onepassword/secrets.go
@@ -8,6 +8,7 @@ import (
 	"bytes"
 	"context"
 	"fmt"
+	"os"
 	"os/exec"
 	"sync"
 	"time"
@@ -64,6 +65,11 @@ func (p *provider) ensureAccount(ctx context.Context) error {
 
 	// Only check once if there is an account.
 	p.once.Do(func() {
+		if os.Getenv("OP_SERVICE_ACCOUNT_TOKEN") != "" {
+			return
+		}
+
+		// Handle manual logins.
 		c := exec.CommandContext(ctx, "op", "account", "list")
 
 		var b bytes.Buffer