Sha256: c20312dc41e661c79c732a4ca105a101bcfc7efe4d94baf8f7f7c13796f0972b
Contents?: true
Size: 1.39 KB
Versions: 31
Compression:
Stored size: 1.39 KB
Contents
---
title: AWS SSM Parameters
nav_text: SSM
categories: helpers-aws
---
The `aws_ssm` helper fetches data from AWS SSM Parameter Store.
## Example
.kubes/resources/shared/secret.yaml
```yaml
apiVersion: v1
kind: Secret
metadata:
name: demo
labels:
app: demo
data:
PASS: <%= aws_ssm("/demo/#{Kubes.env}/PASS") %>
USER: <%= aws_ssm("/demo/#{Kubes.env}/USER") %>
```
For example if you have these ssm parameter values:
$ aws ssm get-parameter --name /demo/dev/PASS --with-decryption | jq '.Parameter.Value'
test1
$ aws ssm get-parameter --name /demo/dev/USER --with-decryption | jq '.Parameter.Value'
test2
.kubes/output/shared/secret.yaml
```yaml
metadata:
namespace: demo
name: demo-2a78a13682
labels:
app: demo
apiVersion: v1
kind: Secret
data:
PASS: dGVzdDEK
USER: dGVzdDIK
```
The values are base64 encoded based on the SSM parameter type. When the type is a `SecureString`, Kubes base64 encodes it. Other types are not base64 encoded. You can override this behavior with the base64 option, described next.
## Base64 Option
The value is automatically base64 encoded based on whether or not the SSM parameter type is a `SecureString`. You can explicitly the `base64` option if needed though. Example:
```ruby
aws_ssm("/demo/#{Kubes.env}/USER", base64: true) # default is base64=true
aws_ssm("/demo/#{Kubes.env}/PASS", base64: false)
```
{% include helpers/base64.md %}
Version data entries
31 entries across 31 versions & 1 rubygems