hashicorp / vault-lambda-extension

Mozilla Public License 2.0
136 stars 29 forks source link

functions deployed as container images #78

Open tjjosep opened 2 years ago

tjjosep commented 2 years ago

I would like to include this extention in the image for functions deployed as container images. Possibly extend AWS base lmabda images for nodeJS, python and goLang. Is it possible retrieve this during the image build?

tomhjp commented 2 years ago

We have some documentation around that here: https://www.vaultproject.io/docs/platform/aws/lambda-extension#step-2-option-b-install-the-extension-for-lambda-functions-packaged-in-container-images

There's also an example Dockerfile here: https://github.com/hashicorp/vault-lambda-extension/blob/main/quick-start/demo-function/Dockerfile. That uses a locally built binary, but you can use the curl command from the first link instead of building it yourself.

metaskills commented 2 years ago

Hey y'all. I made a similar tool that uses a Rust extension to get values from SSM using LD_PRELOAD techniques. I'm sharing here because I released it with both build/deploy your own layer or use Lambda Containers using a simple Docker multistage pattern by leveraging GitHub's packages. Details here if y'all are curious to replicate it.

Hope that helps.