Is fixed. Sorry for the delay :)

Hi there, noob question;

when following the steps here i run:

$ hcloud context create my-project
The HCLOUD_TOKEN environment variable is set. Do you want to use the token from HCLOUD_TOKEN for the new context? (Y/n):
$ y

and then my API key gets permanently stored in plain text in /Users/david/.config/hcloud/cli.tom

Is this expected / intended behavior ?

yes. you need to import the key into 1password vault and it overrides it then. op plugin init hcloud

@shyim Yep, i had done that, as i followed the steps in the guide i had linked to:

rm /Users/david/.config/hcloud/cli.tom

Guide:

op signin
op plugin init hcloud
# search in Password > "Prompt me for each new terminal session"
source ~/.config/op/plugins.sh
echo "source ~/.config/op/plugins.sh" >> ~/.bashrc && source ~/.bashrc

(So, it still saves the password in plain text.)

For the record, it's the last step that saves the password in plain text:

hcloud context create my-project
# i then get prompted for TouchID

@shyim Should i create a new issue for this?