Username Password Credential Provider

[kheina]

creating the username/password credential provider in terraform

• provider functionality
• automated tests
• manual tests

testing output below

terraform hcl

resource "boundary_credential_store_static" "example" {
	name        = "example_static_credential_store"
	description = "this is a static credential store being created for testing purposes only."
	scope_id    = boundary_scope.project.id
}

resource "boundary_credential_username_password" "example" {
	name                = "localhost_credential"
	description         = "username/password for connecting to localhost"
	credential_store_id = boundary_credential_store_static.example.id
	username            = "dani"
	password            = <definitely censoring this>
}

creation TF output

boundary_credential_store_static.example: Creating...
boundary_credential_store_static.example: Creation complete after 1s [id=cs_8GEdw7ZhEZ]
boundary_credential_username_password.example: Creating...
boundary_credential_username_password.example: Creation complete after 1s [id=cred_qpmoHMsf9m]

credential store(s) read

% boundary credential-stores list -scope-id=global -recursive

Credential Store information:
  ID:                    cs_8GEdw7ZhEZ
    Scope ID:            p_2cBOpqNZNg
    Version:             1
    Type:                static
    Name:                example_static_credential_store
    Description:         this is a static credential store being created for testing purposes only.
    Authorized Actions:
      no-op
      read
      update
      delete

credential read

% boundary credentials read -id=cred_qpmoHMsf9m

Credential information:
  Created Time:          Mon, 08 Aug 2022 17:02:33 EDT
  Credential Store ID:   cs_8GEdw7ZhEZ
  Description:           username/password for connecting to localhost
  ID:                    cred_qpmoHMsf9m
  Name:                  localhost_credential
  Type:                  username_password
  Updated Time:          Mon, 08 Aug 2022 17:02:33 EDT
  Version:               1

  Scope:
    ID:                  p_2cBOpqNZNg
    Name:                databases
    Parent Scope ID:     o_2ZLqRfInwr
    Type:                project

  Authorized Actions:
    no-op
    read
    update
    delete

  Attributes:
    Password HMAC:       <43 character hmac>
    Username:            dani

terraform plan (destroy)

Terraform will perform the following actions:

  # boundary_credential_store_static.example will be destroyed
  # (because boundary_credential_store_static.example is not in configuration)
  - resource "boundary_credential_store_static" "example" {
      - description = "this is a static credential store being created for testing purposes only." -> null
      - id          = "cs_8GEdw7ZhEZ" -> null
      - name        = "example_static_credential_store" -> null
      - scope_id    = "p_2cBOpqNZNg" -> null
    }

  # boundary_credential_username_password.example will be destroyed
  # (because boundary_credential_username_password.example is not in configuration)
  - resource "boundary_credential_username_password" "example" {
      - credential_store_id = "cs_8GEdw7ZhEZ" -> null
      - description         = "username/password for connecting to localhost" -> null
      - id                  = "cred_qpmoHMsf9m" -> null
      - name                = "localhost_credential" -> null
      - password            = <definitely censoring this again> -> null
      - password_hmac       = <the same 43 character hmac> -> null
      - username            = "dani" -> null
    }

terraform apply

boundary_credential_username_password.example: Destroying... [id=cred_qpmoHMsf9m]
boundary_credential_username_password.example: Destruction complete after 0s
boundary_credential_store_static.example: Destroying... [id=cs_8GEdw7ZhEZ]
boundary_credential_store_static.example: Destruction complete after 0s

[johanbrandhorst]

Great start on this, thanks Dani!

[johanbrandhorst]

LGTM

[louisruch]

Looks great, I left a couple minor comments. Can you also add a changelog entry for this and the static cred store work that was already completed.

[louisruch]

LGTM