WhatsARanjit

variable "services" {
  description = "Consul Terraform Sync creates this variable"
}

resource "local_file" "tags" {
  content = <<EOT
%{ for node in var.services ~}
${node.address}:
%{ for tag in node.tags ~}
  - ${tag}

WhatsARanjit

<?xml version="1.0" encoding="utf-8"?>
<!--
  For more information on how to configure your ASP.NET application, please visit
  https://go.microsoft.com/fwlink/?LinkId=301879
  -->
<configuration>
  <configSections>
    <!-- For more information on Entity Framework configuration, visit http://go.microsoft.com/fwlink/?LinkID=237468 -->
    <section name="entityFramework" type="System.Data.Entity.Internal.ConfigFile.EntityFrameworkSection, EntityFramework, Version=6.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
  </configSections>

WhatsARanjit

#!/bin/bash

echo "Vault address: ${VAULT_ADDR}"

function vault_curl() {
  curl -sk \
  ${CURL_VERBOSE:+"-v"} \
  --header "X-Vault-Token: $VAULT_TOKEN" \
  --cert   <(echo $VAULT_CLIENT_CERT) \
  --key    <(echo $VAULT_CLIENT_KEY) \

WhatsARanjit

import "tfplan"

# Get all S3 buckets from all modules
get_s3_buckets = func() {
    buckets = []
    for tfplan.module_paths as path {
        buckets += values(tfplan.module(path).resources.aws_s3_bucket) else []
    }
    return buckets
}

WhatsARanjit

import "tfplan"

# Get all S3 buckets from all modules
get_s3_buckets = func() {
    buckets = []
    for tfplan.module_paths as path {
        buckets += values(tfplan.module(path).resources.aws_s3_bucket) else []
    }
    return buckets
}

WhatsARanjit

$data = {
  '?xml version="1.0" encoding="UTF-8"?' => false,
  'xml' => {
    'fruit' => 'apple',
    'vegetables' => {
      'green' => 'cucumber',
      'brown' => 'potato'
    },
    'nested' => {
      'one' => {

WhatsARanjit

#!/bin/bash
vault_call() {
  curl -sk \
  --header "X-Vault-Token: $VAULT_TOKEN" \
  --request $1 \
  http://127.0.0.1:8200/v1/secret/$2
}
list=$(vault_call LIST metadata/$1 | jq -r '.data.keys[]')
SECRETS='[]'
for k in $list; do

WhatsARanjit

Overview

• Admins can check that a secret exists with READ permissions
• Admins cannot actually see the value

Encrypt string before putting in K/V

➜  ~ VALUE=$(vault write transit/encrypt/ranjit -format=json plaintext=$(base64 <<< "supersecret") | jq -r '.data.ciphertext')
➜  ~ vault kv put kv/my-secret value=$VALUE

WhatsARanjit

# Random number generator
resource "random_id" "random" {
  keepers {
    uuid = "${uuid()}"
  }

  byte_length = 8
}

# Dummy resource with attributes

WhatsARanjit

➜  tf-external git:(master) ✗ docker run --name tf --rm -it -v `pwd`:/root -w /root hashicorp/terraform:light plan

➜  tf-external git:(master) ✗ docker run --name tf --rm -it -v `pwd`:/root -w /root hashicorp/terraform:0.11.8 -v
Terraform v0.11.8
+ provider.external v1.0.0
+ provider.null v1.0.0
+ provider.random v2.0.0

Your version of Terraform is out of date! The latest version
is 0.11.10. You can update by downloading from www.terraform.io/downloads.html