Giters

concourse / docs

concourse documentation and website

Home Page:https://concourse-ci.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

`((secret.field))` syntax does not work with AWS Secrets Manager

james-pollard-leapyear opened this issue · comments

commented

We'd love to be able to use the ((secret.field)) syntax, but there seems to be a little bit of missing logic on the concourse side to actually use this with AWSSM.

Is this something that y'all might be willing to take a look at?

FWIW, AWSSM appears to do a pretty great job implementing secret fields on their end.

my testing

  1. aws secretsmanager create-secret --name /concourse/main/test --secret-string '{"user":"foo","password":"bar"}'
  2. Reference ((test.user)) secret in a pipeline:
    failed to interpolate task config: cannot access field 'user' of non-map value ('string') from var: test.user
  3. Just echo ((test)) in a pipeline:
    user:foo password:bar
commented

Oops - I'll re-file this in the actual product repo.