AWS Secrets Manager
To add secrets from AWS Secrets Manager, we need to create a generic Kubernetes secret for AWS authentication.
Create a Kubernetes secret in the namespace in which the application is to be deployed using base64 encoded AWS access-key and secret-access-key. You can use a Devtron generic chart for it.
Note: You don't have to create the Kubernetes secret every time you create external secret for the respective namespace.
After creating the generic secret, navigate to Secrets
section of the application and follow the steps mentioned below :
1. Click Add Secret
to add a new secret
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fadd-secrets.jpg&width=768&dpr=4&quality=100&sign=6a944c1b&sv=1)
2. Select AWS Secret Manager
under External Secret Operator
(ESO) from the dropdown of Data type
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Faws-secret-manager-dropdown.jpg&width=768&dpr=4&quality=100&sign=56837936&sv=1)
3. Configure the secret
Key | Description |
---|---|
| AWS region in which secret is created |
| Name of secret created that would be used for authentication |
| In generic secret created for AWS authentication, variable name in which base64 encoded AWS access-key is stored |
| Name of secret created that would be used for authentication |
| In generic secret created for AWS authentication, variable name in which base64 encoded secret-access-key is stored |
| Key name to store secret |
| AWS Secrets Manager secret name |
| AWS Secrets Manager secret key |
4. Save the secret
ESO AWS secrets Manager Setup with Devtron using ClusterSecretsStore
ClusterSecretStore provides a secure and centralized storage solution for managing and accessing sensitive information, such as passwords, API keys, certificates, and other credentials, within a cluster or application environment.
Requirement: Devtron deployment template chart version should be 4.17 and above.
To setup ESO AWS secrets manager with Devtron using ClusterSecretsStore, follow the mentined steps:
1. Create a secret for AWS authentication
Create a Kubernetes secret in any namespace using base64 encoded AWS access-key and secret-access-key. You can use the devtron generic chart for this.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Faws-secret-generic-chart.jpg&width=768&dpr=4&quality=100&sign=46a777b3&sv=1)
2. Create a ClusterSecretStore
Create a ClusterSecretStore
using the secret created for AWS authentication in step 1.
3. Create a secret in the application using ESO AWS Secrets Manager
Go to the application where you want to create an external secret. Navigate to secrets section under application configuration and create a secret using ESO AWS Secrets Manager.
Last updated