AB Initio
How to use Hanzo KMS secrets in AB Initio.
Prerequisites
Setup
Create a machine identity in Hanzo KMS and give it the appropriate read permissions for the desired project and secret paths.
Update your AB Initio workflows to use KMS CLI to inject Hanzo KMS secrets as environment variables.
# Login using the machine identity. Modify this accordingly based on the authentication method used.
export INFISICAL_TOKEN=$(kms login --method=universal-auth --client-id=$INFISICAL_CLIENT_ID --client-secret=$INFISICAL_CLIENT_SECRET --silent --plain)
# Fetch secrets from Hanzo KMS
kms export --projectId="<>" --env="prod" > kms.env
# Inject secrets as environment variables
source kms.envHow is this guide?
Last updated on