[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":21,"_132":11,"_133":-5,"_134":11,"_135":-5,"_136":137,"_138":91,"_139":-7},"canonicalUrl","https://hub.docker.com/r/tdmalone/aws-ssm/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","tdmalone","reponame","aws-ssm","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":62,"_64":65,"_66":-5,"_67":68,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2019-06-14T02:12:35.291594Z","description","A fork of cmattoon/aws-ssm","is_private","last_updated","2019-06-14T05:38:25.586138Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",1672,"repository_type","star_count",1,"status","status_description","active","source","collaborator_count",0,"full_description","cmattoon/aws-ssm\n================\n\n[![Build Status](https://travis-ci.org/cmattoon/aws-ssm.svg?branch=master)](https://travis-ci.org/cmattoon/aws-ssm)\n![GitHub tag](https://img.shields.io/github/tag/cmattoon/aws-ssm.svg)\n![Docker Pulls](https://img.shields.io/docker/pulls/cmattoon/aws-ssm.svg)\n[![codecov](https://codecov.io/gh/cmattoon/aws-ssm/branch/master/graph/badge.svg)](https://codecov.io/gh/cmattoon/aws-ssm)\n[![Go Report Card](https://goreportcard.com/badge/github.com/cmattoon/aws-ssm)](https://goreportcard.com/report/github.com/cmattoon/aws-ssm)\n[![Maintainability](https://api.codeclimate.com/v1/badges/764dddb334f5dc9fb986/maintainability)](https://codeclimate.com/github/cmattoon/aws-ssm/maintainability)\n\n\nUpdates Kubernetes `Secrets` with values from AWS Parameter Store\n\nBuild Options\n-------------\n\n * Helm Chart (recommended): `make {lint|install|purge}`\n * Go: `make test && make build`\n * Docker: `make container`\n\n\nHelm Chart\n----------\n\n### Install Helm Chart\n\nFirst, export required variables, then run `make install`.\n\n export AWS_REGION=\n\n\n### AWS Credentials\n\nUses the [default credential provider chain](https://docs.aws.amazon.com/sdk-for-go/api/aws/credentials/#NewChainCredentials)\n\n\n### Values\n\nThe following chart values may be set. Only the required variables (AWS credentials) need provided by the user. Most of the time, the other\ndefaults should work as-is.\n\n\n| Req'd | Value | Default | Example | Description |\n|-------|----------------|------------------|-----------------------------|------------------------------------------------------------------|\n| YES | aws.region | \"\" | us-west-2 | The AWS region in which the Pod is deployed |\n| NO | aws.access_key | \"\" | | REQUIRED when no other auth method available (e.g., IAM role) |\n| NO | aws.secret_key | \"\" | | REQUIRED when no other auth method available (e.g., IAM role) |\n| NO | kubeconfig64 | \"\" | | The output of `$(cat $KUBE_CONFIG \\| base64)`. Stored as a Secret|\n| NO | metrics_port | 9999 | | Serve metrics/healthchecks on this port |\n| NO | image.name | cmattoon/aws-ssm | / | The Docker image to use for the Pod container |\n| NO | image.tag | latest | | The Docker tag for the image |\n| NO | resources | {} | | Kubernetes Resource Requests/Limits |\n| NO | rbac.enabled | true | | Whether or not to add Kubernetes RBAC stuff |\n| NO | ssl.mount_host | false | | Mounts {ssl.host_path} -> {ssl.mount_path} as hostVolume |\n| NO | ssl.host_path | /etc/ssl/certs | | The SSL certs dir on the host |\n| NO | ssl.mount_path | /etc/ssl/certs | | The SSL certs dir in the container (dev) |\n\n\nConfiguration\n-------------\n\nThe following app config values can be provided via environment variables or CLI flags.\nCLI flags take precdence over environment variables.\n\nA KUBE_CONFIG and MASTER_URL are only necessary when running outside of the cluster (e.g., dev)\n\n| Environment | Flag | Default | Description |\n|-------------|--------------|----------------|----------------------------------|\n| AWS_REGION | -region | us-west-2 | The AWS Region |\n| METRICS_URL | -metrics-url | 0.0.0.0:9999 | Address for healthchecks/metrics |\n| KUBE_CONFIG | -kube-config | | The path to the kube config file |\n| MASTER_URL | -master-url | | The Kubernetes master API URL |\n| LOG_LEVEL | -log-level | info | The Logrus log level |\n\n\nBasic Usage\n-----------\n1. Create Parameter in AWS Parameter Store\n\n`my-db-password` = `foobar`\n\n2. Create Kubernetes Secret with Annotations\n\n```\napiVersion: v1\nkind: Secret\nmetadata:\n name: my-secret\n annotations:\n aws-ssm/k8s-secret-name: my-secret\n aws-ssm/aws-param-name: my-db-password\n aws-ssm/aws-param-type: SecureString\ndata: {}\n```\n\n3. Run Binary\n\n4. A key with the name `$ParameterType` should have been added to your Secret\n\n```\napiVersion: v1\nkind: Secret\nmetadata:\n name: my-secret\n annotations:\n aws-ssm/k8s-secret-name: my-secret\n aws-ssm/aws-param-name: my-db-password\n aws-ssm/aws-param-type: SecureString\ndata:\n SecureString: Zm9vYmFyCg==\n```\n\nAnnotations\n-----------\n\n| Annotation | Description | Default |\n|----------------------------|--------------------------------------------------------|-----------------|\n| `aws-ssm/k8s-secret-name` | The name of the Kubernetes Secret to modify. | `` |\n| `aws-ssm/aws-param-name` | The name of the AWS SSM Parameter. May be a path. | `` |\n| `aws-ssm/aws-param-type` | Determines how values are parsed, if at all. | `String` |\n| `aws-ssm/aws-param-key` | Required if `aws-ssm/aws-param-type` is `SecureString` | `alias/aws/ssm` |\n\n\n### AWS Parameter Types\n\nValues for `aws-ssm/aws-param-type` are:\n\n| Value | Behavior | AWS Value | K8S Value(s) |\n|----------------|--------------------------|-----------------------------|-----------------------------------------|\n| `String` | No parsing is performed | `foo` = `bar` | `foo: bar` |\n| `SecureString` | Requires `aws-param-key` | `foo` = `bar` | `foo: bar` |\n| `StringList` | Splits CSV mapping | `foo=bar,bar=baz,baz=bat` | `foo: bar`
`bar: baz`
`baz: bat` |\n| `Directory` | Get multiple values | `/path/to/values` | |\n\n\n\nBuild\n-----\n\n make # Build binary\n make container # Build Docker image\n make push # Push Docker image\n\n\nCA Certificates\n---------------\n\nFor ease of use, the `ca-certificates` package is installed on the final `library/alpine` image. If you're having SSL/TLS\nconnection issues, `export HOST_SSL_DIR=/etc/ssl/certs` before running `make install`. This will mount the SSL cert directory\non the EC2 instance.","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",33110721,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":65,"_128":21},"content_type","creator",1778393,"full_size",22347093,"id",58870868,"images",[101],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":65,"_117":-5},"architecture","amd64","digest","sha256:3599c66169de34a88c375416c5525dce335b83e0d28fa25ef4ec6c3983c15b36","features","","last_pulled","2026-10-02T11:31:16.743266179Z","last_pushed","2019-06-14T05:38:26Z","os","linux","os_features","os_version","size","variant","2019-06-14T05:38:25.271584Z","last_updater","last_updater_username","media_type","latest","repository",7262822,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":142,"_149":150,"_136":159,"_160":11},{"_40":143,"_42":144,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":145,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":62,"_64":65,"_66":-5,"_67":68,"_69":70,"_71":11,"_72":33,"_73":146,"_79":11,"_80":148,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":147},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_151":62,"_152":-5,"_153":-5,"_154":155},"count","next","previous","results",[156],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":157,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":65,"_128":21},[158],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":65,"_117":-5},[],"canDeleteTags","actionData","errors"]

tdmalone/aws-ssm

Tags for tdmalone/aws-ssm