Skip to content

Instantly share code, notes, and snippets.

View infamousjoeg's full-sized avatar
🙊
I'm really good at keeping secrets.

Joe Garcia infamousjoeg

🙊
I'm really good at keeping secrets.
View GitHub Profile
@infamousjoeg
infamousjoeg / CreateTestUsers.ps1
Created April 25, 2024 16:18
PowerShell script that creates test users for CyberArk Identity Security Platform SaaS
# Import PowerShell module psPAS, if it doesn't exist, install it
Import-Module psPAS -ErrorAction SilentlyContinue
if ($LASTEXITCODE -ne 0) {
Install-Module psPAS -Force
Import-Module psPAS
}
# Import PowerShell module IdentityCommand, if it doesn't exist, install it
Import-Module IdentityCommand -ErrorAction SilentlyContinue
if ($LASTEXITCODE -ne 0) {
@infamousjoeg
infamousjoeg / clusterrolebinding-admin.yaml
Created April 24, 2024 19:23
ClusterRoleBinding admin to ClusterRole system:service-account-issuer-discovery
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-service-account-issuer-discovery
subjects:
- kind: User
name: admin@example.com # Replace this with your actual admin username
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
@infamousjoeg
infamousjoeg / ClientCertCCP.ps1
Created April 11, 2024 15:25
Client Certificate Authentication with Central Credential Provider (CCP) in PowerShell
## USER VARIABLES
#################
# Specify the path to your .pfx file and its password
$pfxPath = "/Users/joe.garcia/OneDrive - CyberArk Ltd/Software/Certificates/ccp_clientcert_bundle.pfx"
# Define the URI for the CCP API
$uri = "https://cyberark.joegarcia.dev/AIMWebService/api/Accounts"
$appId = "Test"
$safe = "TestSafe"
@infamousjoeg
infamousjoeg / connect_networkdevice.yaml
Created April 10, 2024 16:39
Ansible Automation Platform with CCP for Dynamic Secrets to Network Device
- hosts: all
gather_facts: no
tasks:
- block:
- name: Retrieve Password from CyberArk
cyberark.pas.cyberark_credential:
api_base_url: "{{ ccp_base_url }}"
app_id: "{{ ccp_app_id }}"
@infamousjoeg
infamousjoeg / DiscoverAuthn.sh
Created April 9, 2024 15:24
CyberArk Identity Security Platform - Bash Examples
#!/bin/bash
vibe_check() {
# Check if jq is installed
if ! command -v jq &> /dev/null; then
echo "jq is not installed"
exit 1
fi
# Check if curl is installed

MySQL Download URL

https://dev.mysql.com/get/Downloads/MySQL-5.5/mysql-5.5.56-linux-glibc2.5-x86_64.tar.gz

Open the terminal and follow along:

  • Uninstall any existing version of MySQL
sudo rm /var/lib/mysql/ -R
@infamousjoeg
infamousjoeg / CYBRAutomation.md
Last active February 16, 2024 12:28
CyberArk Automation - Greatest Hits!
@infamousjoeg
infamousjoeg / AIMCCPClientCert.ps1
Last active January 24, 2024 17:51
CCP GetPassword in PowerShell with Client Certificate
# Set request variables
$baseURL = "https://cyberark.joegarcia.dev"
$appID = "Ansible"
$safe = "D-Win-SvcAccts"
$object = "Operating System-WinDomain-joegarcia.dev-Svc_SSIS"
# Define the certificate thumbprint
$thumbprint = "INSERT_CERTIFICATE_THUMBPRINT_HERE"
# Retrieve the certificate from Current User's Personal certificate store
@infamousjoeg
infamousjoeg / event.json
Last active December 20, 2023 17:40
Sample CreateSecret CloudWatch Event
{
"version": "0",
"id": "4725d455-933f-495b-56d9-5ab003cd633f",
"detail-type": "AWS API Call via CloudTrail",
"source": "aws.secretsmanager",
"account": "123456789012",
"time": "2023-12-20T14:39:19Z",
"region": "us-east-1",
"resources": [],
"detail": {
@infamousjoeg
infamousjoeg / main.tf
Last active October 23, 2023 14:11
Sample Terraform Manifest for cyberark/conjur
variable "conjur_appliance_url" {}
variable "conjur_login" {}
variable "conjur_api_key" {}
provider "conjur" {
appliance_url = var.conjur_appliance_url
account = "conjur"
login = var.conjur_login
api_key = var.conjur_api_key
}