hi there. Was wondering how people use chamber and...
# geodesicc
ChristianF
09/07/2021, 9:41 AMhi there. Was wondering how people use chamber and atmos together. For example, how to get parameters from terraform (urls, keys) into helmfile or other tools. From what I saw it’s purely static config and does not support variable substituation, e.g to inject env variables dynamically. The same goes for secrets management. Or is the current understanding to just leave the env variable substitution logic inside TF and helmfile?
e
Erik Osterman (Cloud Posse)
09/07/2021, 3:31 PMthe design philosophy there to not make anything dynamic in the stack configs. otherwise we're just creating a language on top of a language.
Erik Osterman (Cloud Posse)
09/07/2021, 3:31 PMinstead, it's the responsibility for your terraform components (root modules) to read from SSM
Erik Osterman (Cloud Posse)
09/07/2021, 3:31 PMthat's why
chamberErik Osterman (Cloud Posse)
09/07/2021, 3:32 PMmake your component as declarative as possible. if you need a secret, the path to the secret in SSM should be the parameter, not the value.
c
ChristianF
09/07/2021, 3:54 PMthanks for the quick reply. this sounds like the way to go to read a secret stored in SSM from terraform. my challenge is in reading a secret stored in SSM from helm/helmfile. for example previously I had terraform write the secret and then chamber injecting for helmfile to consume through env vars to create a k8s secret.
ChristianF
09/07/2021, 3:55 PMi haven’t checked yet but maybe there is a way already to consume secrets from ssm in helmfile
ChristianF
09/07/2021, 4:01 PMok. I think I found what I was looking for here https://github.com/roboll/helmfile/pull/906.
e
Erik Osterman (Cloud Posse)
09/07/2021, 8:01 PMyes, you can read from SSM directly in helmfile
Erik Osterman (Cloud Posse)
09/07/2021, 8:01 PMyou can also use the
terraform-provider-helmfileErik Osterman (Cloud Posse)
09/07/2021, 8:01 PMfor customers that have easier helm deployments, we've started using the native helm provider in terraform.
Erik Osterman (Cloud Posse)
09/07/2021, 8:01 PMwe also have this module https://github.com/cloudposse/terraform-aws-helm-release
Erik Osterman (Cloud Posse)
09/07/2021, 8:02 PMso if you use any of the terraform methods, you can access SSM that way, or as you mentioned you can read from SSM natively in helmfile
c
ChristianF
09/08/2021, 7:40 AMthanks for the pointers and generally for the help. I would like to use atmos in the short to midterm and execute helmfile straight from there. In particular the stack concept would fit well in my use case.