Michael Treacher treacher

Senior Software Engineer @github

treacher / kube2iam.yaml

Created September 17, 2017 10:31

	apiVersion: extensions/v1beta1
	kind: DaemonSet
	metadata:
	name: kube2iam
	namespace: kube-system
	labels:
	app: kube2iam
	spec:
	template:
	metadata:

treacher / deployment.yaml

Created September 17, 2017 10:27

	---
	kind: Deployment
	apiVersion: extensions/v1beta1
	metadata:
	name: kube-kms-example
	namespace: default
	labels:
	app: kube-kms-example
	spec:
	replicas: 2

treacher / node-policy.json

Created September 17, 2017 10:21

	{
	"Version": "2012-10-17",
	"Statement": [
	{
	"Action": [
	"sts:AssumeRole"
	],
	"Effect": "Allow",
	"Resource": "arn:aws:iam::{AccountId}:role/k8s/*"
	}

treacher / Dockerfile.kube-kms-example

Last active September 17, 2017 10:18

	FROM alpine:3.5

	RUN apk add --update bash curl && rm -rf /var/cache/apk/*

	# Install shush
	RUN curl -sL -o /usr/local/bin/shush \
	https://github.com/realestate-com-au/shush/releases/download/v1.3.0/shush_linux_amd64 \
	&& chmod +x /usr/local/bin/shush

	# Add a user so that we're not running our executables as root.

treacher / secrets.yaml

Created September 17, 2017 10:01

	KMS_ENCRYPTED_DB_PASSWORD: "AQICAHj5jPUgYWAnjEXVeSvtg98gusmUcncxTb1pg+/p9W6NOAHd4xDeWtNSGUWMyqOf7h6cAAAAZzBlBgkqhkiG9w0BBwagWDBWAgEAMFEGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM7tDQv7h73zQftY5tAgEQgCTlI1uXcgBrNdvsBoXb2ytkkya+VJRHl2zZWMW5qzheJ2YKeSg="
	KMS_ENCRYPTED_DB_USER: "AQICAHj5jPUgYWAnjEXVeSvtg98gusmUcncxTb1pg+/p9W6NOAHrz68itBGQ6jgbmK6HgzDRAAAAYTBfBgkqhkiG9w0BBwagUjBQAgEAMEsGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMJj0q65b8KZo4sRY6AgEQgB7cksi/tq9lmyQtBh4uK6HfmyoMHIMm+a72gu4o8Qo="
	KMS_ENCRYPTED_API_KEY: "AQICAHj5jPUgYWAnjEXVeSvtg98gusmUcncxTb1pg+/p9W6NOAFobUiYON7DRYoe3ZtSC5nNAAAAZzBlBgkqhkiG9w0BBwagWDBWAgEAMFEGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMSsYpPDJvAnRITyNsAgEQgCREj7SdmKYG7gX+JOMJfYG4ILnujd0ZLfXYrJcxrTy4XTCkTzU="
	KMS_ENCRYPTED_SERVICE_PASSWORD: "AQICAHj5jPUgYWAnjEXVeSvtg98gusmUcncxTb1pg+/p9W6NOAElX/reSqpDqhuY1RgYaQ72AAAAZjBkBgkqhkiG9w0BBwagVzBVAgEAMFAGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMy8al1te4FCu+pdEjAgEQgCNlNfdZamx7R5cHhX6uQSFRCsaIx58lN2bA97wQlhtRAQYPuw=="

treacher / feed-secrets-to-shush.sh

Created September 17, 2017 09:58

	#!/bin/bash

	file_location=$1
	kms_key=$2

	display_usage() {
	echo "Usage: $0 <file-with-secrets> <kms-key-alias>"
	exit 1
	}

treacher / install-shush

Created September 17, 2017 09:56

	curl -sL -o /usr/local/bin/shush \
	https://github.com/realestate-com-au/shush/releases/download/v1.3.0/shush_linux_amd64 \
	&& chmod +x /usr/local/bin/shush

treacher / kms.yaml

Last active May 28, 2021 15:53

	AWSTemplateFormatVersion: 2010-09-09
	Resources:
	# KMS Key which we'll be using to encrypt our environment variables
	Key:
	Type: AWS::KMS::Key
	Properties:
	Description: kube-kms-example application secrets key
	KeyPolicy:
	Version: 2012-10-17
	Id: allow-root-access-to-key

treacher / secrets.txt

Created September 17, 2017 09:46

treacher / pod-with-secrets.yaml

Last active September 17, 2017 09:07