Skip to content

Commit 1038b29

Browse files
committed
chore(cyberark): add cyberark self hosted secrets manager
1 parent 051dc0b commit 1038b29

File tree

4 files changed

+100
-0
lines changed

4 files changed

+100
-0
lines changed
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
apiVersion: v1
3+
kind: Secret
4+
metadata:
5+
name: ggscout-secrets
6+
stringData:
7+
GITGUARDIAN_API_KEY: "your_gitguardian_token"
8+
9+
# CyberArk Self-Hosted API credentials
10+
CYBERARK_LOGIN: "host/your-workload-login"
11+
CYBERARK_API_KEY: "your_cyberark_api_key"
12+
CYBERARK_SERVER_URL: "https://your-cyberark-server.example.com"
13+
CYBERARK_ACCOUNT: "your_cyberark_account"
Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
---
2+
# yaml-language-server: $schema=../../values.schema.json
3+
4+
inventory:
5+
config:
6+
sources:
7+
cyberark_selfhosted:
8+
type: cyberarkselfhosted
9+
auth_mode: "api"
10+
login: "${CYBERARK_LOGIN}"
11+
api_key: "${CYBERARK_API_KEY}"
12+
server_url: "${CYBERARK_SERVER_URL}"
13+
account: "${CYBERARK_ACCOUNT}"
14+
fetch_all_versions: true
15+
mode: "read/write" # Can be `read`, `write` or `read/write` depending on wether fetch and/or sync are enabled
16+
17+
gitguardian:
18+
endpoint: "https://api.gitguardian.com/v1"
19+
api_token: "${GITGUARDIAN_API_KEY}"
20+
jobs:
21+
# Job to fetch defined sources
22+
fetch:
23+
# Set to `false` to disable the job
24+
enabled: true
25+
# Run every 15 minutes
26+
schedule: "*/15 * * * *"
27+
send: true
28+
# Job to be able to sync/write secrets from GitGuardian into you vault
29+
sync:
30+
# Set to `false` to disable the job
31+
enabled: true
32+
# Run every minute
33+
schedule: "* * * * *"
34+
35+
envFrom:
36+
- secretRef:
37+
name: ggscout-secrets
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
apiVersion: v1
3+
kind: Secret
4+
metadata:
5+
name: ggscout-secrets
6+
stringData:
7+
GITGUARDIAN_API_KEY: "your_gitguardian_token"
8+
9+
# CyberArk Self-Hosted credentials
10+
CYBERARK_USERNAME: "your_cyberark_username"
11+
CYBERARK_PASSWORD: "your_cyberark_password"
12+
CYBERARK_SERVER_URL: "https://your-cyberark-server.example.com"
13+
CYBERARK_ACCOUNT: "your_cyberark_account"
Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
---
2+
# yaml-language-server: $schema=../../values.schema.json
3+
4+
inventory:
5+
config:
6+
sources:
7+
cyberark_selfhosted:
8+
type: cyberarkselfhosted
9+
auth_mode: "user"
10+
username: "${CYBERARK_USERNAME}"
11+
password: "${CYBERARK_PASSWORD}"
12+
server_url: "${CYBERARK_SERVER_URL}"
13+
account: "${CYBERARK_ACCOUNT}"
14+
fetch_all_versions: true
15+
mode: "read/write" # Can be `read`, `write` or `read/write` depending on wether fetch and/or sync are enabled
16+
17+
gitguardian:
18+
endpoint: "https://api.gitguardian.com/v1"
19+
api_token: "${GITGUARDIAN_API_KEY}"
20+
jobs:
21+
# Job to fetch defined sources
22+
fetch:
23+
# Set to `false` to disable the job
24+
enabled: true
25+
# Run every 15 minutes
26+
schedule: "*/15 * * * *"
27+
send: true
28+
# Job to be able to sync/write secrets from GitGuardian into you vault
29+
sync:
30+
# Set to `false` to disable the job
31+
enabled: true
32+
# Run every minute
33+
schedule: "* * * * *"
34+
35+
envFrom:
36+
- secretRef:
37+
name: ggscout-secrets

0 commit comments

Comments
 (0)