Skip to content

Commit 7d8e605

Browse files
authored
get secrets from vault (#620)
1 parent 05e1b03 commit 7d8e605

File tree

1 file changed

+2
-12
lines changed

1 file changed

+2
-12
lines changed

.gitlab/scripts/get_secrets.sh

+2-12
Original file line numberDiff line numberDiff line change
@@ -21,21 +21,11 @@ fi
2121

2222
printf "Getting AWS External ID...\n"
2323

24-
EXTERNAL_ID=$(aws ssm get-parameter \
25-
--region us-east-1 \
26-
--name "ci.datadog-lambda-js.$EXTERNAL_ID_NAME" \
27-
--with-decryption \
28-
--query "Parameter.Value" \
29-
--out text)
24+
EXTERNAL_ID=$(vault kv get -field=$EXTERNAL_ID_NAME kv/k8s/gitlab-runner/datadog-lambda-js/secrets)
3025

3126
printf "Getting DD API KEY...\n"
3227

33-
export DD_API_KEY=$(aws ssm get-parameter \
34-
--region us-east-1 \
35-
--name ci.datadog-lambda-js.dd-api-key \
36-
--with-decryption \
37-
--query "Parameter.Value" \
38-
--out text)
28+
export DD_API_KEY=$(vault kv get -field=dd-api-key kv/k8s/gitlab-runner/datadog-lambda-js/secrets)
3929

4030
printf "Assuming role...\n"
4131

0 commit comments

Comments
 (0)