Add new mode for vault-unsealer using ssm parameter with type SecureString

CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.3.4] - 2018-10-11
+
+### Added
+
+* Adds new mode aws-sec-ssm which is using ssm parameters type SEcureString which can be automatically decrypted by AWS KMS key
+* Update Dockerfile to multistage build format
+
 ## [0.3.0] - 2017-09-03
 
 ### Added

Dockerfile

@@ -1,7 +1,16 @@
-FROM alpine:3.6
+FROM golang:1.10.3 as builder
 
-RUN apk add --update ca-certificates
+ARG CI_COMMIT_TAG
+ARG CI_COMMIT_SHA
+ARG CI_DATE
+
+COPY . /go/src/github.com/jetstack/vault-unsealer
+WORKDIR /go/src/github.com/jetstack/vault-unsealer
 
-COPY vault-unsealer_linux_amd64 /usr/local/bin/vault-unsealer
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -tags netgo -ldflags "-w -X main.version=${CI_COMMIT_TAG} -X main.commit=${CI_COMMIT_SHA} -X main.date=${CI_DATE}" -o vault-unsealer
+
+FROM alpine:3.6
+RUN apk add --update ca-certificates
+COPY --from=builder /go/src/github.com/jetstack/vault-unsealer/vault-unsealer /usr/local/bin/vault-unsealer
 
-ENTRYPOINT ["/usr/local/bin/vault-unsealer"]
+ENTRYPOINT ["/usr/local/bin/vault-unsealer"]