Configuration from AWS? #784

hrstoyanov · 2024-04-26T23:07:39Z

hrstoyanov
Apr 26, 2024

Config parameter and secrets are very cheaply stored in AWS Parameter Store or even AWS S3 buckets. Both are very popular and affordable. Is this available in Kamal?

nickhammond · 2024-05-24T17:45:32Z

nickhammond
May 24, 2024

@hrstoyanov You can pull your secrets from anywhere you'd like, Kamal doesn't have anything built in for this though.

You'd follow this part of the generated .env file instructions and then swap out the op calls with AWS CLI calls instead.

https://kamal-deploy.org/docs/configuration/environment-variables/#using-a-generated-env-file

Here's an example utilizing AWS Secrets Manager with the aws-sdk-secretsmanager gem, you could easily swap this with the parameter store or S3 CLI commands instead though.

<%
  require 'aws-sdk-secretsmanager'
  client = Aws::SecretsManager::Client.new(profile: "staging", region: "us-east-2")
-%>

<% client.list_secrets.secret_list.each do |secret| -%>
  <% JSON.parse(client.get_secret_value(secret_id: secret.arn).secret_string).each_pair do |k, v
8000
| -%>
    <%= k %>=<%= v %>
  <% end -%>
<% end -%>

0 replies

anatoly-pashin-axon21 · 2025-06-13T11:31:57Z

anatoly-pashin-axon21
Jun 13, 2025

Solution for v2 (.kamal/secrets file):

KAMAL_REGISTRY_USERNAME=$(aws --profile=$AWS_PROFILE ssm get-parameter --name "$SSM_PREFIX""KAMAL_REGISTRY_USERNAME" --with-decryption --output text --query 'Parameter.Value')

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Configuration from AWS? #784

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Configuration from AWS? #784

Uh oh!

hrstoyanov Apr 26, 2024

Replies: 2 comments

Uh oh!

nickhammond May 24, 2024

Uh oh!

anatoly-pashin-axon21 Jun 13, 2025

hrstoyanov
Apr 26, 2024

nickhammond
May 24, 2024

anatoly-pashin-axon21
Jun 13, 2025