From b3a0be95908adfd8b9c798ea2d4c4f9cda76080f Mon Sep 17 00:00:00 2001
From: Vincent Sijben <36117924+vincentsijben@users.noreply.github.com>
Date: Sat, 10 Aug 2019 22:18:34 +0200
Subject: [PATCH] update rexray example with secret

- typo bride -> bridge
- add secret, env and updated the command line
---
 stack-rexray.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/stack-rexray.yml b/stack-rexray.yml
index e97eb85..5624560 100644
--- a/stack-rexray.yml
+++ b/stack-rexray.yml
@@ -1,6 +1,6 @@
 version: "3.7"
 
-# 1. WORKAROUND: would prefer this use null network driver, will use bride for now to avoid overlay
+# 1. WORKAROUND: would prefer this use null network driver, will use bridge for now to avoid overlay
 # 2. TODO: would prefer on-failure restart_policy, but need to run this in script to look
 # for if plugin exists first before reinstalling
 # 3. TODO: would prefer this picks a driver version, and support driver updates
@@ -22,13 +22,21 @@ services:
       - bridge
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
-    command: docker plugin install --grant-all-permissions rexray/dobs DOBS_REGION=nyc3 DOBS_TOKEN="${REXRAY_DO_TOKEN}" DOBS_CONVERTUNDERSCORES=true
-    # TODO: make token a secret
+    secrets:
+      - rexray_do_token
+    environment:
+      - REXRAY_DO_TOKEN_FILE=/run/secrets/rexray_do_token
+    command: sh -c "docker plugin install --grant-all-permissions rexray/dobs DOBS_REGION=nyc3 DOBS_TOKEN=`cat $REXRAY_DO_TOKEN_FILE` DOBS_CONVERTUNDERSCORES=true"
     deploy:
       mode: global
       restart_policy:
         condition: none
 
+secrets:
+  rexray_do_token:
+    external: true
+    name: rexray_do_token
+    
 networks:
   bridge:
     external: true