Permission denied when using front end secrets

I’m inserting a secrets file by using [Manage >> Environment >> Secret Files] from the dashboard front end. My deployment is running as non-root with a uid assigned to gid 1000.

I have read the documentation here: Using Secrets with Docker – Render Docs, which makes it sound like I should be able to access the secrets at runtime (even as non-root) if my group (gid) is 1000.

But this does not work – on runtime, I still get “/etc/secrets/my_secrets: Permission denied” errors.

Specifically, in my Dockerfile I call:

RUN groupadd --gid 1000 mygroup 
RUN useradd -ms /bin/bash --uid 1000 --gid 1000 myuser

USER 1000:1000

CMD ["/home/scripts/run.sh"]

How can I access secrets as non-root with a Dockerfile deployment in Render?

I have the same issue and I’m ready to bail on Render because this has been so frustrating to try to resolve. The documentation is either inaccurate or lacking sufficient detail to make it clear how secret files are supposed to be accessed.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.