<p>I would like to avoid keeping secret in the Git as a best practise, and store it in AWS SSM.</p>
<p>Is there any way to get the value from AWS System Manager and use to create Kubernetes Secret?</p>

<p>I manage to create secret by fetching value from AWS Parameter store using the following script.</p>
<pre><code>    cat &lt;&lt;EOF | ./kubectl apply -f -
    apiVersion: v1
    kind: Secret
    metadata:
      name: kiali
      namespace: istio-system
    type: Opaque
    data:
      passphrase: $(echo -n &quot;`aws ssm get-parameter --name /dev/${env_name}/kubernetes/kiali_password --with-decrypt --region=eu-west-2 --output text --query Parameter.Value`&quot; | base64 -w0)
      username: $(echo -n &quot;admin&quot; | base64 -w0)
    EOF
</code></pre>
