jefrnc

cdktf-vault  Terraform used the selected providers to generate the following execution plan.
             Resource actions are indicated with the following symbols:
               ~ update in-place

             Terraform will perform the following actions:
cdktf-vault    # vault_policy.group_devops_policy_ldap_devops_developer_82DAFADE (group_devops_policy/ldap_devops_developer) will be updated in-place
               ~ resource "vault_policy" "group_devops_policy_ldap_devops_developer_82DAFADE" {
                     id     = "ldap_devops_developer"
                     name   = "ldap_devops_developer"
                   ~ policy = <<-EOT

jefrnc

origin_url=$(git config --get remote.origin.url)

if [[ $origin_url == *"AgTechHub"* ]]; then
    new_url=${origin_url/AgTechHub/nera-agro}
    git remote remove origin

    git remote add origin $new_url

    echo "El origen del repositorio se ha actualizado a $new_url"
else

jefrnc

<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
  <servers>
    <server>
      <id>nera-agro-nera-libs</id>
      <username>aws</username>
      <password>${env.CODEARTIFACT_AUTH_TOKEN}</password>
    </server>
    <server>
      <id>nera-agro-nera-maven</id>

jefrnc

import boto3
import hvac
import sys
import pysos
import time
import os
import argparse

def fetch_from_ssm(path):
    session = boto3.Session(profile_name='shared-services')

jefrnc

SSM: successfully retrieved key=/production/devops-services-prod/devops/infra/devops-services-prod-main/actions-runner-controller/gh_app_id
SSM: successfully retrieved key=/production/devops-services-prod/devops/infra/devops-services-prod-main/actions-runner-controller/gh_client_id
SSM: successfully retrieved key=/production/devops-services-prod/devops/infra/devops-services-prod-main/actions-runner-controller/gh_private_key
SSM: successfully retrieved key=/production/devops-services-prod/devops/infra/devops-services-prod-main/actions-runner-controller/gh_webhook_secret_token
Adding repo actions-runner-controller https://actions-runner-controller.github.io/actions-runner-controller
"actions-runner-controller" has been added to your repositories

SSM: successfully retrieved key=/production/devops-services-prod/devops/infra/devops-services-prod-main/akhq/clientid
SSM: successfully retrieved key=/production/devops-services-prod/devops/infra/devops-services-prod-main/akhq/googlesecret
Adding repo akhq https://akhq

jefrnc

[
    {
        "pipelineName": "airflow_finance_dags",
        "repositoryURL": "git@github.com:frubana/devops_jenkins-pipelines.git",
        "credentialId": "github-key",
        "branchName": "master",
        "pipelineFile": "airflow/airflow_finance_dags.Jenkinsfile"
    },
    {
        "pipelineName": "airflow_finance_dags",

jefrnc

buildscript { 
    repositories {
        mavenCentral()
        gradlePluginPortal()
        google()
        jcenter()
        maven {
        	url 'https://jitpack.io'
        	allowInsecureProtocol = true
        }

jefrnc

echo "Install tzdata..."
export TZ=Etc/UTC
export DEBIAN_FRONTEND=noninteractive
apt update -y && \
    apt install -y tzdata

echo "Install hashicorp vault stress test tool..."
apt install git -y && \
    apt install software-properties-common -y && \
    add-apt-repository ppa:deadsnakes/ppa -y && \

jefrnc

import org.jenkinsci.plugins.scriptsecurity.scripts.*


println "groovy:"
println "  - script: |"
println "      import org.jenkinsci.plugins.scriptsecurity.scripts.*"
println "      ScriptApproval scriptApproval = ScriptApproval.get()"
println "      ["

// List all Signatures approved on Jenkins

jefrnc

sudo yum update -y
sudo yum install -y java-1.8.0-openjdk-devel
cd /opt
wget https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-7.6.zip
unzip sonarqube-7.6.zip
sudo groupadd sonar
sudo useradd -c "Sonar System User" -d /opt/sonarqube-7.6 -g sonar -s /bin/bash sonar
sudo chown -R sonar:sonar /opt/sonarqube-7.6
sudo chmod -R 775 /opt/sonarqube-7.6/