I hereby claim:
- I am robbytaylor on github.
- I am robbytaylor (https://keybase.io/robbytaylor) on keybase.
- I have a public key ASBlRuAba1GLj-Q-FSCSlUHj2O25kbmsrw3v-CPn0NNs5go
To claim this, I am signing this object:
Rob Taylor robbytaylor
robbytaylor
/ keybase.md
Created
March 6, 2020 10:59
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vars_prompt: | |
| - name: op_secret | |
| prompt: What is your 1Password secret key? | |
| - name: op_pass | |
| prompt: What is your 1Password password? |
robbytaylor
/ 1password.yml
Created
January 1, 2020 11:24
Ansible playbook to install and authenticate the 1Password CLI tool
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| - name: Unarchive 1Password CLI tool | |
| unarchive: | |
| src: 'https://cache.agilebits.com/dist/1P/op/pkg/v{{ op.version }}/op_linux_amd64_v{{ op.version }}.zip' | |
| remote_src: yes | |
| dest: /tmp | |
| - name: Copy 1Password CLI tool into place | |
| copy: | |
| src: /tmp/op |
robbytaylor
/ ssh.yml
Created
January 1, 2020 11:04
Ansible tasks to retreive SSH keys from 1Password
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| - name: Pi private key | |
| copy: | |
| dest: '/home/{{ user }}/.ssh/rasberrypi.local' | |
| content: "-----BEGIN RSA PRIVATE KEY-----\n{{ lookup('onepassword', 'Raspberry Pi', field='private') | replace(' ', '\n') }}\n-----END RSA PRIVATE KEY-----" | |
| mode: 0600 | |
| - name: Pi public key | |
| copy: | |
| dest: '/home/{{ user }}/.ssh/rasberrypi.local.pub' | |
| content: "{{ lookup('onepassword', 'Raspberry Pi', field='public') }}" |
robbytaylor
/ gist:b0a9aca3ec57d5513c3635566ce9311e
Created
September 23, 2019 11:31
AWS SCP restrict an action except to a single role
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Effect": "Deny", | |
| "Action": [ | |
| "s3:PutObject" | |
| ], | |
| "Resource": "*", | |
| "Condition": { |
robbytaylor
/ gist:32f05a9d23df859a23d30cee56e8f554
Created
September 23, 2019 11:24
AWS Region whitelist SCP
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Effect": "Deny", | |
| "NotAction": [ | |
| "iam:*", | |
| "organizations:*", | |
| "route53:*", | |
| "budgets:*", |
robbytaylor
/ gist:b16f93e99c69d4a52faf1e08010850d1
Last active
September 23, 2019 12:38
AWS SCP service whitelist
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Effect": "Deny", | |
| "NotAction": [ | |
| "cloudtrail:*", | |
| "cloudwatch:*", | |
| "ec2:*" | |
| "guardduty:*", |