module · Secrets & Config

Doppler

Doppler — projects, configs, workplace members, and per-project config inventory state. Secret values are never written to snapshot files; use show secrets --reveal for live reads.

Namespace: weave doppler Env: DOPPLER_TOKEN

Commands

State kinds

Secrets & Config

Setup

Configure credentials via environment variables. We recommend sourcing them through 1Password or your secrets manager rather than committing them to the shell rc.

Official API reference

weave commands for this module are checked against the vendor's published API.

Doppler API

Variable	Description	Status
DOPPLER_TOKEN	Required for authentication.	required

Sanity-check the wiring:

weave secrets check
weave doppler --help
weave doctor   # reports DOPPLER_TOKEN status

Capabilities

What this module can do, by entity and verb. ✓ means a working CLI surface; · means not (yet) wired.

Entity	find	list	show	do	snapshot	diff	apply
config	·	✓	·	·	·	·	·
member	·	✓	·	·	·	·	·
project	✓	✓	·	·	✓	✓	✓
secrets	·	·	✓	·	·	·	·

Commands

Every registered CLI command, grouped by verb. Each example uses placeholder arguments — substitute real values for your environment.

find (1)

find project

read

Find a project by name.

weave doppler find project <name>

list (3)

list configs

read

List configs in a project.

weave doppler list configs <arg>

list members

read

List workplace members.

weave doppler list members <arg>

list projects

read

List Doppler projects.

weave doppler list projects <arg>

show (1)

show secrets

read

List secret names in a config (values hidden by default).

weave doppler show secrets <project>

snapshot / diff / apply are generated automatically from the State Kinds declared on this module — see the State kinds section below for per-kind details. Workflow: snapshot → edit YAML → diff → apply --yes (or confirm interactively; apply --dry-run previews the same diff).

State kinds

Resources this module can snapshot and diff; apply where the kind supports live writes (see Round-trip per kind). Always run diff before apply; use --yes in automation after review. Files live under .weave-state/doppler/.

projects

snapshot diff apply

Doppler projects — name and description via PATCH /projects/:id.

Scope: —
Round-trip: Full round-trip — snapshot, diff, apply.

State file skeleton

module: doppler
kind: projects
items:
  - # <fields specific to this kind — see snapshot output>

Workflows

End-to-end recipes from operators who already run this module in production. Copy, adapt, and put under change-control.

Project metadata audit

Snapshot, diff, and apply Doppler projects.

weave doppler snapshot projects
$EDITOR .weave-state/doppler/projects.yaml
weave doppler diff projects
weave doppler apply projects

List projects

weave doppler list projects

Terraform parity

For each Terraform resource in the canonical provider, here's the equivalent live-API verb in weave. Use this as a migration cheat-sheet, not a 1:1 contract — weave deliberately stays in the live-state lane, not the desired-state lane.

Terraform resource	weave equivalent
doppler_project	weave doppler snapshot/diff/apply projects Round-trip via Doppler API v3.

Troubleshooting & source

Missing credentials

Run weave doctor — it reports which env vars (including DOPPLER_TOKEN) are set and which are blank.

Unexpected behaviour from a state apply

Re-run weave doppler diff <kind> to confirm the controller's current state, then re-snapshot before the next apply. The driver always re-snapshots before diffing.

Open the source

The module lives at https://github.com/andy-broyles/weavewhatever/tree/main/src/weave/modules/doppler. File a bug or feature request at https://github.com/andy-broyles/weavewhatever/issues.