AWS Secrets Manager

详细介绍了关于密钥仓库组件的信息

配置

要设置AWS Secrets Manager密钥仓库，请创建一个类型为secretstores.aws.secretmanager的组件。 See this guide on how to create and apply a secretstore configuration. See this guide on referencing secrets to retrieve and use the secret with Dapr components.

See Authenticating to AWS for information about authentication-related attributes.

  1. apiVersion: dapr.io/v1alpha1
  2. kind: Component
  3. metadata:
  4.   name: awssecretmanager
  5.   namespace: default
  6. spec:
  7.   type: secretstores.aws.secretmanager
  8.   version: v1
  9.   metadata:
  10.   - name: region
  11.     value: "[aws_region]"
  12.   - name: accessKey
  13.     value: "[aws_access_key]"
  14.   - name: secretKey
  15.     value: "[aws_secret_key]"
  16.   - name: sessionToken
  17.     value: "[aws_session_token]"

Warning

以上示例将密钥明文存储， It is recommended to use a local secret store such as Kubernetes secret store or a local file to bootstrap secure key storage.

元数据字段规范

字段必填详情Example
regionYAWS Secrets Manager 实例所部署的特定AWS 区域“us-east-1”
accessKeyY要访问此资源的 AWS 访问密钥“key”
secretKeyY要访问此资源的 AWS 密钥访问 Key“secretAccessKey”
sessionTokenN要使用的 AWS 会话令牌“sessionToken”

创建一个AWS Secrets Manager实例

参考AWS文档设置AWS Secrets Manager：https://docs.aws.amazon.com/secretsmanager/latest/userguide/tutorials\_basic.html。

相关链接