1password

Retrieve and inject 1Password secrets via op CLI and Kubernetes operators.

7|1|Updated Jul 12, 2026
One-click install
npx skills add https://github.com/julianobarbosa/claude-code-skills --skill 1password
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1password
Source: https://github.com/julianobarbosa/claude-code-skills/tree/main/skills/1password
Command: npx skills add https://github.com/julianobarbosa/claude-code-skills --skill 1password

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires op, jq, kubectl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides guidance for using 1Password's secrets management ecosystem, including the op CLI for local development, service accounts for automation, and Kubernetes integration via External Secrets Operator or the native 1Password Operator.

Core Features & Use Cases

  • CLI-based secret management: Retrieve, inject, and manage secrets with the 1Password CLI.
  • Automation via service accounts: Create service accounts for CI/CD pipelines and automation.
  • Kubernetes integration: Integrate with External Secrets Operator or 1Password Kubernetes Operator.
  • Use Case: Automatically provision credentials in CI pipelines without embedding secrets.

Quick Start

Sign in using op signin, then read a secret with an op read "op://vault/item/field".

Frequently Asked Questions about 1password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate secret retrieval in CI/CD pipelines without hardcoding credentials?

Use 1Password service accounts with the op CLI to retrieve secrets programmatically. Service accounts authenticate automation workflows, and op read commands inject secrets into environment variables or files, eliminating embedded credentials in pipelines.

Can I integrate 1Password secrets with Kubernetes deployments?

Yes. Deploy the 1Password Operator or External Secrets Operator to automatically provision Kubernetes secrets from 1Password vaults. Both sync vault items and references (op://...) directly into cluster secret objects.

What's the quickest way to start using 1Password CLI for local development?

Sign in with op signin, then retrieve secrets using op read "op://vault/item/field". The CLI integrates with shell environments, allowing instant secret injection into commands and scripts without manual vault navigation.

Does 1Password CLI work with existing Kubernetes operators?

The 1Password CLI (op) integrates with External Secrets Operator and the native 1Password Kubernetes Operator. Both support vault item management and automated secret provisioning into cluster deployments.

What do I need to set up 1Password automation across local and cloud environments?

Install the op CLI, jq for parsing, and kubectl for Kubernetes access. Create service accounts for authentication, configure vault references, and choose either External Secrets Operator or 1Password Operator for cluster integration.

Why use 1Password Operator instead of storing secrets in ConfigMaps or environment variables?

1Password Operator centralizes secret management in a hardened vault, rotates credentials automatically, and encrypts secrets at rest in Kubernetes. ConfigMaps and environment variables expose plaintext secrets and lack audit trails or rotation.