springload / ssm-parent Goto Github PK

I have a few properties like mailHost and mailHostPort, as well as databaseUsername and mailUsername. For each of these pairs, i only get one entry returned in the result, but not both. As a work around i have to specifically list all 4 of these out in the parameters, but I would much prefer to not have to do that.

Thanks for making a great util like this!

I was wondering if it would be possible to extend its functionality by also being able to use the AWS Secrets Manager service. I find Secrets Manager to be a little nicer to work with since it outputs Key:Value pairs in JSON format by default.

Thanks.

This is a great utility which will solve a critical issue for me. However, when i try any of the functions provided I am getting the following error:

* Can't unmarshal json from '/ecs/app/service/env/s3Bucket': invalid character 'a' looking for beginning of value

It does not seem that the type matters... I just cannot get any properties to parse properly.

any Idea what I am doing wrong?

I am calling the command with:

AWS_REGION=us-east-X ssm-parent print -p /ecs/app/service -r

There are a few vulnerabilities detected by Amazon's ECR vulnerability check when using SSM parent as part of an image:
GHSA-69ch-w2m2-3vjp
GHSA-ppp9-7jff-5vj2
CVE-2022-32149
CVE-20220-29526
GHSA-p782-xgp4-8hr8

I've addressed these vulnerabilities on the following pull- request:
#15

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Vulnerability description: https://nvd.nist.gov/vuln/detail/CVE-2022-29526

We need to update sys to 0.1.0

I started actually using this in my environments and I have about 7 containers trying to usethis on ECS.
All run on the same type of machines, in the same ECS Cluster.

On 2 of my containers, I am getting the following for all attempted plain paths or names:

Can't get parameters from path '<my path>': RequestError: send request failed
https://ssm.us-east-2.amazonaws.com/: x509: certificate signed by unknown authority

The tasks restart and keep try but this continues for these containers every time.
Any ideas?