Skip to content

Instantly share code, notes, and snippets.

🔒
SECURE ALL THE MACHINES!!

Joe Garcia, CISSP infamousjoeg

Block or report user

Report or block infamousjoeg

Hide content and notifications from this user.

Learn more about blocking users

Contact Support about this user’s behavior.

Learn more about reporting abuse

Report abuse
View GitHub Profile
@infamousjoeg
infamousjoeg / authn-k8s-policy.yml
Last active May 9, 2019
Clean Example of Authn-K8s Policy for CyberArk DAP & Conjur Open Source
View authn-k8s-policy.yml
- !policy
id: conjur/authn-k8s/conjur-follower
#Subpolicy to define all things required for OpenShift Authentication
body:
- !webservice
annotations:
description: Authentication service definition for follower namespace
- !policy #policy definition for CA - used as part of authenticator
@infamousjoeg
infamousjoeg / ProvisioningExample.yml
Last active May 8, 2019
Example deploying a LAMP Stack and provisioning with Ansible Role infamousjoeg.provisioning
View ProvisioningExample.yml
---
- hosts: localhost
pre_tasks:
- name: Install Apache & PHP
yum:
name: ['httpd', 'php', 'php-mysql']
state: present
- name: Install Web Role Specific Dependencies
@infamousjoeg
infamousjoeg / conjur-demo-app.go
Created May 3, 2019
Example Go App for Conjur Demos of authn-k8s
View conjur-demo-app.go
package main
import (
"database/sql"
"fmt"
"log"
"os"
"github.com/cyberark/conjur-api-go/conjurapi"
_ "github.com/go-sql-driver/mysql"
@infamousjoeg
infamousjoeg / cloudbeesdays-pipeline.groovy
Created Apr 8, 2019
CloudBees Days Conjur Workshop 2019 - Pipeline Script for Simple Token App
View cloudbeesdays-pipeline.groovy
pipeline {
agent any
stages {
stage ('Checkout SCM') {
steps {
checkout(
[
$class: 'GitSCM',
branches: [[name: '*/master']],
@infamousjoeg
infamousjoeg / aimcp-restapi.yml
Last active Mar 21, 2019
Example of @cyberark AIM Credential Provider + @cyberark REST API + Ansible Community 2.5+
View aimcp-restapi.yml
---
- hosts: localhost
roles:
- role: cyberark.modules
tasks:
- name: Logon to CyberArk Vault using PAS Web Services SDK
cyberark_authentication:
@infamousjoeg
infamousjoeg / RESTAPI_example.ps1
Created Jan 3, 2019
REST API example from git.joeco.de/CyberArk-RESTAPI with writing output of Get Accounts request
View RESTAPI_example.ps1
function PASREST-Logon {
# Declaration
$webServicesLogon = "$PVWA_URL/PasswordVault/WebServices/auth/Cyberark/CyberArkAuthenticationService.svc/Logon"
# Authentication
$bodyParams = @{username = "Svc_CyberArkAPI"; password = "password"} | ConvertTo-JSON
# Execution
try {
@infamousjoeg
infamousjoeg / DevOpsToolsTrainingAgenda.md
Created Dec 20, 2018
Sample DevOps Tools Training Agenda for DevOps Training
View DevOpsToolsTrainingAgenda.md

Continuous Integration (CI) (BUILD / TEST / RELEASE)

Jenkins

  • Other less popular CI tools
    • jetBrains TeamCity
    • Travis CI (SaaS-only)
    • Atlassian Bamboo
    • Pivotal Concourse
    • CircleCI
    • Yes, even GitLab CI
View main.py
from flask import Flask
app = Flask('app')
#@app.route('/')
#def hello_world():
# return 'Hello, World!'
@app.route('/rob')
View main.sh
print_red() {
RED='\033[0;31m'
NC='\033[0m' # No Color
printf "${RED}${1}${NC}\n"
}
print_orange() {
ORANGE='\033[0;33m'
NC='\033[0m' # No Color
echo -e "${ORANGE}${1}${NC}"
@infamousjoeg
infamousjoeg / Jenkinsfile
Last active Oct 17, 2018
Jenkinsfile example of how to use CyberArk Conjur's Credential Plugin for Jenkins OSS
View Jenkinsfile
pipeline {
agent any
triggers {
pollSCM('H * * * *')
}
stages {
stage('Work') {
steps {
You can’t perform that action at this time.