Merge pull request #27 from remerge/CORE-556

Remove Okta enrollment token from Google instance template
remerge · Feb 29, 2024 · d6755d6 · d6755d6
2 parents 01e36d9 + 268a333
commit d6755d6
Showing 1 changed file with 0 additions and 9 deletions.
diff --git a/google/compute/template/main.tf b/google/compute/template/main.tf
@@ -27,19 +27,10 @@ resource "google_compute_instance_template" "default" {
             "http://metadata.google.internal/computeMetadata/v1/instance/$${1}"
     }
 
-    if [[ ! -e /var/lib/sftd/device.token ]]; then
-        mkdir -p /var/lib/sftd
-        gcloud secrets versions access latest \
-            --secret=okta-enrollment-token \
-            >/var/lib/sftd/enrollment.token
-        chmod 0600 /var/lib/sftd/enrollment.token
-    fi
-
     if [[ ! -e /etc/sft/sftd.yaml ]]; then
         mkdir -p /etc/sft
         cat >/etc/sft/sftd.yaml <<EOF
     ---
-    EnrollmentTokenFile: /var/lib/sftd/enrollment.token
     AccessAddress: "$(metadata network-interfaces/0/ip)"
     CanonicalName: "$(metadata hostname)"
     EOF