PR Custody

feat(thermos): load boot secrets from AWS Secrets Manager

@acsrujanchecks n/achecks…thermos-secrets-manager-boot → master2 files · +68 −7review: @abir-taheerreview: @anshugarg15updated 1w ago

▸Description · 1 noise

load Thermos boot secrets from an AWS Secrets Manager JSON secret when THERMOS_SECRETS_MANAGER_SECRET_ID is set
export valid JSON keys into the Thermos process environment before exec
skip Doppler when Secrets Manager has loaded, while keeping Doppler as a fallback for non-migrated environments
install aws-cli and jq in the Thermos runtime image for secret loading

▸ 1 bot/status comment hidden

@github-actions[bot]1w ago

Based on git blame analysis of 2 file(s):

Based on git history, Zen or Utkarsh Dixit would be good reviewer(s) for this PR.

🤖 Based on git blame with recency weighting (recent edits count more).

loading diff…