AWS Secrets: Configure Groundplex Nodes

This page is no longer maintained (Apr 12, 2023). For the most current information, go to https://docs.snaplogic.com/cicd/secrets-mgmt/secrets-mgmt-aws-config-key-based.html.

 

 

Overview

The node configuration file (secrets-config.json) contains the information that the Snaplex needs to access the appropriate secrets.

Steps

  1. In a Snaplex node host, create or edit the secrets-config.json in the /etc/snaplogic directory.

  2. Copy and paste the JSON structure and fill in the required values.

    { "AWS": [ { "alias": "config-name", "project_space": "/snaplogic/shared", "aws_region" : "us-east-2", "aws_access_key_id": "", "aws_secret_access_key": "", "aws_session_token": "", "profile_name": "" } ] }
    • alias – The name of this configuration object.

    • project_space – Optional. If specified, restricts the use of the secrets to the specified project space.

    • You can get the following information from AWS:

      • aws_region

      • aws_access_key_id

      • aws_secret_access_key

      • aws_session_token

      • profile_name

  3. Save the file and copy it to the /etc/snaplogic directory of the other nodes in the Groundplex.

  4. Restart the JCC service on the node hosts. On Linux: /opt/snaplogic/bin/jcc.sh restart