Add integration with Hashicorp Vault, AWS SSM, SecretsManager

[klebediev]

Fields which are rendered: Release.Values, Release.SetValues.Value, Release.SetValues.Values

Example:

values:
- foo: ref+vault://mykv/foo?address=http://127.0.0.1:8200#/mykey
set:
- name: xyz
  values:
  - ref+vault://mykv/foo?address=http://127.0.0.1:8200#/mykey3

Resolves #881

[excavador]

I need this

[mumoshu]

@klebediev Thanks a lot for the PR! I'm super excited to finally get this into Helmfile 🎉

This generally LGTM. The only thing I wanted to do before merging this is to consult you about the latest changes I've made in vals helmfile/vals@8e822fb

The biggest improvement (I believe it is) is the use of host part in URLs. I've also added several query params to make it even more configurable so that more use-cases can be supported.

The usage examples can be found at: https://github.com/variantdev/vals#suported-backends

Does it look good to you? If so, please update the vals by running go get -u github.com/variantdev/vals and then I'll merge this asap :)

Thanks in advance for your support!

[klebediev]

Hi @mumoshu !
I'm super-excited we are so close!
The only small issue that disallows me to update vals version in gp.mod is addressed here

I like your latest improvements to vals. Thank you!
Also, looks like we'll have to extend syntax vault provider in order to be able to support retrieving secrets from multiple vault servers, see details here

So, waiting for you to merge above PR tp vals, then I'll be able to update go.mod

[mumoshu]

@klebediev Thanks for the confirmation and submitting the PR!

I've just merged it and also implemented the enhancement to the vault provider. Hope you like it.

[klebediev]

updated go.mod

[mumoshu]

LGTM. Thanks a lot for your contribution, @klebediev!

Let's merge this and see how it works in the wild. Fingers crossed.

[mumoshu]

I've updated the PR description to accomodate the latest syntax.

[mumoshu]

This should resolve #745 as well.

[mumoshu]

v0.89.0 is live with this feature.

[excavador]

Thank you so much!

[tduffield]

@mumoshu @klebediev thank you both so much for the fast turnaround on this functionality :) You managed to get this designed, implemented, and released within the timeline of my Helm POC.

[etiennejournet]

Hi @mumoshu, thanks for the fast reply on #392

It looks like it doesn't work with ~/.vault-token ? But it works with env variables.

Thanks

[adecchi]

Is possible to get all secrets from aws secrets manager and map as environment variable in the deployment using it in a helm chart repository that then we run with helmfile ?