-
Notifications
You must be signed in to change notification settings - Fork 0
/
.envrc.default
42 lines (34 loc) · 1.29 KB
/
.envrc.default
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
#
# This file is part of Becoming a Hacker Foundations
# Copyright (c) 2024, Cisco Systems, Inc.
# All rights reserved.
#
########
# Configs
#########
export TF_VAR_cfg_file="config.yml"
#export TF_VAR_cfg_extra_vars=""
#########
# Secrets
#########
#
# Conjur
#
# These assume you've already set up the Conjur CLI and logged in. This will
# add secrets to the OS Keychain.
# E.g.
# CONJUR_APPLIANCE_URL="https://conjur-prod.cisco.com"
# #CONJUR_APPLIANCE_URL="https://conjur-prod-follower.cisco.com"
# conjur init --url "$CONJUR_APPLIANCE_URL" --account cisco --force
# conjur login --id "host/sto/becomingahacker/$(hostname -s)"
# conjur whoami
# Read/Write from CAPnet
#export CONJUR_APPLIANCE_URL="https://conjur-prod-write.cisco.com"
# Read-only from CAPnet
#export CONJUR_APPLIANCE_URL="https://conjur-prod-follower.cisco.com"
#export CONJUR_APPLIANCE_URL="https://conjur-nonprod-follower.cisco.com"
# Read-only from Internet
export CONJUR_APPLIANCE_URL="https://conjur-prod.cisco.com"
export CONJUR_ACCOUNT="cisco"
export CONJUR_AUTHN_LOGIN="$(security find-generic-password -s ${CONJUR_APPLIANCE_URL}/authn -a login -w | cut -d ':' -f 2 | base64 -d -i -)"
export CONJUR_AUTHN_API_KEY="$(security find-generic-password -s ${CONJUR_APPLIANCE_URL}/authn -a password -w | cut -d ':' -f 2 | base64 -d -i -)"