From 7c5f6c5f0f9ccb2e9cfa66423c7da62b10c3888e Mon Sep 17 00:00:00 2001 From: Alexandre Pires Date: Sat, 15 Mar 2025 22:45:15 +0100 Subject: [PATCH] Updated to new sectool --- .github/actions/get-host-info/action.yml | 14 +++++++++++--- .github/actions/setup-ansible-env/action.yml | 18 ++++++++++++++---- .github/actions/setup-k8s-env/action.yml | 18 ++++++++++++++---- .github/workflows/actions-validate.yml | 16 +++++++++++----- .../workflows/ansible-apply-hosts-changes.yml | 8 ++++++-- .github/workflows/ansible-apply-playbook.yml | 8 ++++++-- .../ansible-validate-playbook-on-pr.yml | 8 ++++++-- .github/workflows/terraform-aws-iac-apply.yml | 7 ++++--- .../terraform-aws-iac-validate-on-pr.yml | 4 +++- .github/workflows/terraform-iac-apply.yml | 10 +++++++--- .../workflows/terraform-iac-validate-on-pr.yml | 12 +++++++++--- .github/workflows/terraform-microk8s-apply.yml | 12 +++++++++--- .../workflows/terraform-microk8s-validate.yml | 12 +++++++++--- ansible/sectool.json | 7 +++++++ repository.vault | 1 - sectool.json | 7 +++++++ terraform/aws-iac/sectool.json | 7 +++++++ terraform/iac/sectool.json | 7 +++++++ terraform/k8sapps/sectool.json | 7 +++++++ 19 files changed, 144 insertions(+), 39 deletions(-) create mode 100644 ansible/sectool.json delete mode 100644 repository.vault create mode 100644 sectool.json create mode 100644 terraform/aws-iac/sectool.json create mode 100644 terraform/iac/sectool.json create mode 100644 terraform/k8sapps/sectool.json diff --git a/.github/actions/get-host-info/action.yml b/.github/actions/get-host-info/action.yml index 65451a3..88784c8 100644 --- a/.github/actions/get-host-info/action.yml +++ b/.github/actions/get-host-info/action.yml @@ -1,8 +1,14 @@ name: Setup K8S Environment description: Prepare the environment for A13labs CI/CD pipelines inputs: - vault-master-password: - description: "The master password for the vault" + access-token: + description: "Bitwarden access token" + required: true + project-id: + description: "Bitwarden project ID" + required: true + organization-id: + description: "Bitwarden organization ID" required: true ansible-user: description: "The user to use for Ansible" @@ -22,7 +28,9 @@ runs: id: get-system-id shell: bash env: - VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }} + BW_ACCESS_TOKEN: ${{ inputs.access-token }} + BW_PROJECT_ID: ${{ inputs.project-id }} + BW_ORGANIZATION_ID: ${{ inputs.organization-id }} ANSIBLE_USER: ${{ inputs.ansible-user }} SSH_AUTH_SOCK: /tmp/ssh_agent.sock TARGET_HOST: ${{ inputs.target-host }} diff --git a/.github/actions/setup-ansible-env/action.yml b/.github/actions/setup-ansible-env/action.yml index c8597d3..e2f4d44 100644 --- a/.github/actions/setup-ansible-env/action.yml +++ b/.github/actions/setup-ansible-env/action.yml @@ -1,8 +1,14 @@ name: Setup Ansible Environment description: Prepare the environment for A13labs CI/CD pipelines inputs: - vault-master-password: - description: "The master password for the vault" + access-token: + description: "Bitwarden access token" + required: true + project-id: + description: "Bitwarden project ID" + required: true + organization-id: + description: "Bitwarden organization ID" required: true ansible-user: description: "The user to use for Ansible" @@ -34,7 +40,9 @@ runs: - name: Prepare SSH key shell: bash env: - VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }} + BW_ACCESS_TOKEN: ${{ inputs.access-token }} + BW_PROJECT_ID: ${{ inputs.project-id }} + BW_ORGANIZATION_ID: ${{ inputs.organization-id }} run: | sectool ssh unlock ansible mkdir -p ~/.ssh @@ -71,7 +79,9 @@ runs: id: start-ssh-agent shell: bash env: - VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }} + BW_ACCESS_TOKEN: ${{ inputs.access-token }} + BW_PROJECT_ID: ${{ inputs.project-id }} + BW_ORGANIZATION_ID: ${{ inputs.organization-id }} SSH_AUTH_SOCK: ${{ inputs.ssh-auth-socket }} run: | ssh-agent -a $SSH_AUTH_SOCK > /dev/null diff --git a/.github/actions/setup-k8s-env/action.yml b/.github/actions/setup-k8s-env/action.yml index ff8093b..207aad8 100644 --- a/.github/actions/setup-k8s-env/action.yml +++ b/.github/actions/setup-k8s-env/action.yml @@ -1,8 +1,14 @@ name: Setup K8S Environment description: Prepare the environment for A13labs CI/CD pipelines inputs: - vault-master-password: - description: "The master password for the vault" + access-token: + description: "Bitwarden access token" + required: true + project-id: + description: "Bitwarden project ID" + required: true + organization-id: + description: "Bitwarden organization ID" required: true ansible-user: description: "The user to use for Ansible" @@ -20,7 +26,9 @@ runs: - name: Copy Kube Config from remote host shell: bash env: - VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }} + BW_ACCESS_TOKEN: ${{ inputs.access-token }} + BW_PROJECT_ID: ${{ inputs.project-id }} + BW_ORGANIZATION_ID: ${{ inputs.organization-id }} ANSIBLE_USER: ${{ inputs.ansible-user }} SSH_AUTH_SOCK: ${{ inputs.ssh-auth-sock }} K8S_TARGET: ${{ inputs.k8s-target }} @@ -31,7 +39,9 @@ runs: - name: Forward K8S API Server port shell: bash env: - VAULT_MASTER_PASSWORD: ${{ inputs.vault-master-password }} + BW_ACCESS_TOKEN: ${{ inputs.access-token }} + BW_PROJECT_ID: ${{ inputs.project-id }} + BW_ORGANIZATION_ID: ${{ inputs.organization-id }} ANSIBLE_USER: ${{ inputs.ansible-user }} SSH_AUTH_SOCK: ${{ inputs.ssh-auth-sock }} K8S_TARGET: ${{ inputs.k8s-target }} diff --git a/.github/workflows/actions-validate.yml b/.github/workflows/actions-validate.yml index e43f5d8..8594251 100644 --- a/.github/workflows/actions-validate.yml +++ b/.github/workflows/actions-validate.yml @@ -21,23 +21,29 @@ jobs: - name: Setup Ansible environment uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} - name: Setup Terraform environment uses: ./.github/actions/setup-terraform-env - + - name: Setup Kubernetes Environment uses: ./.github/actions/setup-k8s-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} - name: Get remote host info uses: ./.github/actions/get-host-info id: get-host-info with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} - name: Test ansible @@ -53,7 +59,7 @@ jobs: - name: Test terraform run: | terraform --version - + - name: Show remote host info run: | echo "System ID: ${{ steps.get-host-info.outputs.system-id }}" diff --git a/.github/workflows/ansible-apply-hosts-changes.yml b/.github/workflows/ansible-apply-hosts-changes.yml index ad50f61..8af350d 100644 --- a/.github/workflows/ansible-apply-hosts-changes.yml +++ b/.github/workflows/ansible-apply-hosts-changes.yml @@ -22,13 +22,17 @@ jobs: - name: Setup Ansible environment uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} trusted-hosts: ${{ secrets.TRUSTED_HOSTS }} - name: Apply the playbook that triggered the workflow env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} SSH_AUTH_SOCK: /tmp/ssh_agent.sock CHANGED_FILES: ${{ steps.setup_env.outputs.CHANGED_FILES }} diff --git a/.github/workflows/ansible-apply-playbook.yml b/.github/workflows/ansible-apply-playbook.yml index 118e2a2..6d1a73b 100644 --- a/.github/workflows/ansible-apply-playbook.yml +++ b/.github/workflows/ansible-apply-playbook.yml @@ -22,13 +22,17 @@ jobs: - name: Setup Ansible environment uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} trusted-hosts: ${{ secrets.TRUSTED_HOSTS }} - name: Apply the playbook that triggered the workflow env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} SSH_AUTH_SOCK: /tmp/ssh_agent.sock CHANGED_FILES: ${{ steps.setup_env.outputs.CHANGED_FILES }} diff --git a/.github/workflows/ansible-validate-playbook-on-pr.yml b/.github/workflows/ansible-validate-playbook-on-pr.yml index 4fe827f..bc82a40 100644 --- a/.github/workflows/ansible-validate-playbook-on-pr.yml +++ b/.github/workflows/ansible-validate-playbook-on-pr.yml @@ -25,13 +25,17 @@ jobs: - name: Setup Ansible environment uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} trusted-hosts: ${{ secrets.TRUSTED_HOSTS }} - name: Apply the playbook that triggered the workflow env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} SSH_AUTH_SOCK: /tmp/ssh_agent.sock run: | diff --git a/.github/workflows/terraform-aws-iac-apply.yml b/.github/workflows/terraform-aws-iac-apply.yml index bc75f81..e3926d1 100644 --- a/.github/workflows/terraform-aws-iac-apply.yml +++ b/.github/workflows/terraform-aws-iac-apply.yml @@ -21,13 +21,14 @@ jobs: - name: Setup environment uses: ./.github/actions/setup-env - - name: Setup Terraform environment uses: ./.github/actions/setup-terraform-env - + - name: Terraform Init and Apply env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} run: | cd terraform/aws-iac sectool exec terraform init diff --git a/.github/workflows/terraform-aws-iac-validate-on-pr.yml b/.github/workflows/terraform-aws-iac-validate-on-pr.yml index b3788ed..41093b1 100644 --- a/.github/workflows/terraform-aws-iac-validate-on-pr.yml +++ b/.github/workflows/terraform-aws-iac-validate-on-pr.yml @@ -28,7 +28,9 @@ jobs: - name: Terraform Init and Validate env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} run: | cd terraform/aws-iac sectool exec terraform init diff --git a/.github/workflows/terraform-iac-apply.yml b/.github/workflows/terraform-iac-apply.yml index 307fa13..4d94587 100644 --- a/.github/workflows/terraform-iac-apply.yml +++ b/.github/workflows/terraform-iac-apply.yml @@ -32,16 +32,20 @@ jobs: uses: ./.github/actions/get-host-info id: get-host-info with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} target-host: iac - name: Setup Terraform environment uses: ./.github/actions/setup-terraform-env - + - name: Terraform Init and Apply env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} SYSTEM_ID: ${{ steps.get-host-info.outputs.system-id }} run: | cd terraform/iac diff --git a/.github/workflows/terraform-iac-validate-on-pr.yml b/.github/workflows/terraform-iac-validate-on-pr.yml index 1924bf1..dfc9e7d 100644 --- a/.github/workflows/terraform-iac-validate-on-pr.yml +++ b/.github/workflows/terraform-iac-validate-on-pr.yml @@ -26,7 +26,9 @@ jobs: - name: Setup Ansible environment uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} host-group: iac @@ -34,7 +36,9 @@ jobs: uses: ./.github/actions/get-host-info id: get-host-info with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} target-host: iac @@ -43,7 +47,9 @@ jobs: - name: Terraform Init and Validate env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} SYSTEM_ID: ${{ steps.get-host-info.outputs.system-id }} run: | cd terraform/iac diff --git a/.github/workflows/terraform-microk8s-apply.yml b/.github/workflows/terraform-microk8s-apply.yml index 345b9be..e03f32b 100644 --- a/.github/workflows/terraform-microk8s-apply.yml +++ b/.github/workflows/terraform-microk8s-apply.yml @@ -25,7 +25,9 @@ jobs: id: setup_ansible_env uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} host-group: microk8s @@ -35,12 +37,16 @@ jobs: - name: Setup Kubernetes Environment uses: ./.github/actions/setup-k8s-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} - name: Terraform Init and Apply env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} SSH_AUTH_SOCK: ${{ steps.setup_ansible_env.outputs.ssh-auth-sock }} run: | diff --git a/.github/workflows/terraform-microk8s-validate.yml b/.github/workflows/terraform-microk8s-validate.yml index 8af5b5f..4b0c079 100644 --- a/.github/workflows/terraform-microk8s-validate.yml +++ b/.github/workflows/terraform-microk8s-validate.yml @@ -27,7 +27,9 @@ jobs: id: setup_ansible_env uses: ./.github/actions/setup-ansible-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} host-group: microk8s @@ -37,12 +39,16 @@ jobs: - name: Setup Kubernetes Environment uses: ./.github/actions/setup-k8s-env with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} + project-id: ${{ secrets.BW_PROJECT_ID }} + organization-id: ${{ secrets.BW_ORGANIZATION_ID }} + access-token: ${{ secrets.BW_ACCESS_TOKEN }} ansible-user: ${{ secrets.ANSIBLE_USER }} - name: Terraform Init and Validate env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} + BW_PROJECT_ID: ${{ secrets.BW_PROJECT_ID }} + BW_ORGANIZATION_ID: ${{ secrets.BW_ORGANIZATION_ID }} + BW_ACCESS_TOKEN: ${{ secrets.BW_ACCESS_TOKEN }} run: | cd terraform/k8sapps sectool exec terraform init diff --git a/ansible/sectool.json b/ansible/sectool.json new file mode 100644 index 0000000..6618a28 --- /dev/null +++ b/ansible/sectool.json @@ -0,0 +1,7 @@ +{ + "provider": "bitwarden", + "bitwarden": { + "api_url": "https://api.bitwarden.eu", + "identity_url": "https://identity.bitwarden.eu" + } +} \ No newline at end of file diff --git a/repository.vault b/repository.vault deleted file mode 100644 index 8e01473..0000000 --- a/repository.vault +++ /dev/null @@ -1 +0,0 @@ -B+VRY8Crek7PUwrDAe0skcPz/lMI2ntMy6jRo0qv3r3VZxwZvJeKl8Y6rW0RpINGVfW77JT1SA6mnYaKarxRvo2ULwcC2FfYt3EMA4krosJci00HF+6NzcOV1O76hc3HArprIpyILAZpaybd6QRGGIhlYQalKn+EYkD67a5lJ5E2QQaQUTXvuifnHR3pzy1EuVvCs9ndU1VAVtr+CutqV6rHBgNKD/qNe1sFsHkF3XTV13N3hRGPzfq8Wc0EKTA555ygYXygWvGSgq9gd65WGaD3SE+f0EkYmNJCmSsRYweoRqg5zN8D/8BzexFRSMyeh4FDETnpOhthlFkEBPaygsg3fjGjao9JWA9GnPl4KRQIUwQvjJEhylYFhmgi+fXtfdFQkqULXjdTtPjlTxWjvwU1Poe3Qh0h/FQjDGBifqvG28vqjlpDXLmekQHljdyczdZ/UkLvgYUvVqxdq2DM29qgrlXopEQlG8IEjw9iMznv7RfKn7VPoxfibJWb1XdUoYoUsPOiuD29JYl2IGxu2nHshFYCh3lVQlesLlVum3SyTd3unQRbqZHVUX4cf2bQU6m0b60PYWmOosFLklQ/BITruy4lveDqc+eik7lSRhlN/C1+t1gZ92jg2Mqq6p51caP2v/4VDrjr6MSpuigsrB/yS2F9maKaSbQg4JZJuQ0m6XDaQwpg3xIv9SB5BAjmqbajIz0cNlMsYb/Uxi/Su8xfmZPaTQWoRyvkFJe70R9nLU5y6jUum8bLlQq/Z84AutbPaqMOqwnNOgKafYZAvq++CHCeypRQoABgvq5ApTfU0de3uRR3xGpmGwx0L/QmUIl+dX3yBuDc4bmVGL2ZEG+kNC+Uc8/gK7+o9UlSB2JXuNMpYE/pK4RjofFw5YPQfZh2hwh+RxXC5+sbqSM+0Za4vrKqRoVgrtk3KP4boRMCul85hLw4GoDfKq1XW8QLzHI+y6yFtIeY0JhFAzUgyfOYoE33KASC75KhzwnDNPWtRPq9Fcin7iZpukMUyRoziP7oUQHY9k3aYEL+YVyzWfdL/ib9J9e9VTCOZcbLUrOs/ad4rNGTpH4xHgF9r0o5Voaci/etDtYayjMzSdijHDq8N+AwamRWv7zPZ8xAZeTNRmE5XcQDBWZfxV0OrNFja9IPyQO6hsseDdN88qtvXqicB17nFNl4pcpBFK4iJNkBJpf92cSwjRMU0LaafPpIZqivmj6UxRjwPa807LeXq12ZMS3l301Y/+9FNdVmpgOzs3myq5m2x4mTqIlQJ7R+I3vjlKYsj+9kHTzJElIaGp/bfqWWShtPvyHyx/St+aNd+8k/IbDA7nj09A2W/exYkDCY+uVa5ghBhw55ypDkV6B0ayFlJw+IkczqXhvt1vmRB7a2i6WOMdGZdeOQQYpFlR3Vt9quMqHMw9o8AQfg/iQvHczQ8aiMQXUPUdfjGTsVZnvIoZUW+IE6XU2jjyWfmT7VAQp/jUkHBpi315xuhXCC2WUn4tjE4rjLzVAU8OEUp6fDSP+9JcuJWlYfjljBnKV2lL59x97B2Ziv4rj2e3P8579BhJWAxu+pymEM51CwHIdwssvlLWnjZv45b9ykJOUXWWfhYuDW3M8HRgC7MU8QVLTYvnTvw8+E1osGsOiLS928+AovTcgcrRUiqB7v/sutPyZ9DvKqvQ1g7bVvrXSnZr/hC8+FKkUCiMhbCWp/e4yemWZIpuy+DduKdhkHem1ZUSEv8qLzAbtgwJPARUSggJW87DWQCdKU7YKCwZYADdpYXFBjGJ5gSHqKKMeJL/my869bGuZOBhVkLPoI/Z189iR7T1U2CPER0RcSMfLfIvEfBdzvOVK9YTCjigQvNdl2k9mQzRvi0o0c7+tCoUqcYyqMsTzmU7wwZmIv5OSTp60LpU1Uh9vfI7tcMKVOlYJS/+1bpIBDFF0/Fgae3IZRdugGYr7uuESn+n3ZdFJXvy4N6WN2M1EQpotyx/wheby7S5UVALi3fbLHMtHNmfvdmUdjbYrEhT0Y+qjTRLf8nVPLTpKviC1bLd38xv4tylFgF6TVtXMb09vFA1mIZEAH8ipT1KQnYHE+UpwfkRscR1o8MaoKyMyIhLRcGJqSxOk8oYLCHN/3RHQqmZDajDXRGhXfJCwzXuTtYp5AwLcbFRyBVDtGITyRAWxK+jPbGG2fGV33PPg02/cZ/BpdoEeVzVxs1sm7pIpS4MleIK94wbcH6vSMzgkFa/IIIHMWXSFF1LYNEc20iwfYZf9EJGCW7yZ0MtcS+/QuPViHV8zufzK9NixnUYwVVb6ExM0voPF3Hf+ZmUJbDUOLt5J4twUkCckbLm/EeXygl7PsHmgfy0/gth4FA6GiWJ2+I1ARGjqPfwZ7IpD4+CVc6VsD6EnK6RCbVfVc1KAOgUEMKfeVnVPI64CeMBI0tM1L+OXkzckvxlgLxBeaG98uyEEYL5xQG9hf8ozJiLDC72bDy/n3MsNsE9hGXiEjQvRAvKx84+NNRdbDacPfyV9hev0eJ09Al0GdDf0OlhMpWNyvkg/LbBwZ4QiYTtliJKvznQSaRZmTvQSGFxiM4cVta0w9W7cfV4zGIdnpPj7DooBYoXBFr44XZHsYy4/wvOPvCMrmpdC1xNwsK33SZkqr5M/86HF+1DLT4QXW5A48oNhBEj0Kv6s1fXOV2PP7OjTmRbq59nYr0ULdHFVgZV9N645+W3AdKVx+f8gBVBiiSETVnso8OJ7B+5xcTb2TXwqQb+TnKpA+i2BeNzI8sp5J9OfMqR9o24+62BcWnjDMjqwv5pEg+6Ub1kwNzbwtUts0/Va7n6C+/HAt5pqUIJIeV0FTZdZjP6PYrW7QHii9gpcMb7XXsJFTvxSpFF461NyWyv78S3D+fv+Pbr46GNgmqhNrc9VC1dpXP+d/HmtV5kBHdDbsjpEin75NjUEteLIiWLOHtMtptbPSMVY4nVHtj0WSSKwpnjTVwVe4mHoysPrCJ9u3kYQ2Zpw9Pvb9XDm04+eoNDVTTrzYG8now+bWSWJGe0d4DhWdyYOBVcMtpXlBLS9gkt7dTXjsiMf/+bucRzdztoQ6k1KXNd5EvHWiRiZV1XAT285hnD2NQiRDbVanUrYOeEG7WeViKXIWzd/BDdBV0uoWJV/k2GVduRu98eGtnVxNypjPEwsg3hW+YbSZz+AtwDB85+WLQotzSc87+hRxIBDbGOc4TtCRF575LnsOdCsdg3QnX6Xgom8GY9ie89nFr1dOHHEUV8xeRHP2nn05k7UVGFrYhTKYak0rUSsbqxwMvnN70bYJ9GeZdJLryI5br7pG1yrjSnB9iiTB8s9qotYYNkcELUO4eUcn6+FrRT4z6Q9UI+61XQiy1GmXnWQz3hPlDG5Py6Ij/q6M082FGCa+LHKRXN8APizdR5dcHYWmkqfkOrFnGKYvvcVJst54f4RBq32r2XUpO/qxmgrkBKA/wtuvvCY6LWDRpPYFm9TO15a6FiFO9NDnRqFLUlCrqrNqNU8vnMybrDSXJDYKIbf6SY6Msiy95WRb+EhTymuYymI033dTDPHQQTfW7489dBuHcPij0IARBYux29Y1KegUr9NRegcb4JmptZGvBUVbb+K4zwve5DHMTw5VZ7r8VZeGyStNRS/gjbPLy4I9tfY0h/YCYCSNaDt8n3p5Nbx/v+NOctKzswy4bmmYlec6n6jnU9sLC6DfsQ+/wkWyMHh+E2TEpz0zWkejaGevWd3hoZwub16uLAqBSry3dlPVUTu4UURZk6qMrbk3CTGaCZyZ2AEVYGRha9a3lYp5Ar8GUIDuyxuVI/L0+bTzL0NXRNianFkCIo+RUQtgj6fYd2qoImkgv4Ilqid7K4sfela0Sc3irrm7SsOP6ESwiBdW \ No newline at end of file diff --git a/sectool.json b/sectool.json new file mode 100644 index 0000000..6618a28 --- /dev/null +++ b/sectool.json @@ -0,0 +1,7 @@ +{ + "provider": "bitwarden", + "bitwarden": { + "api_url": "https://api.bitwarden.eu", + "identity_url": "https://identity.bitwarden.eu" + } +} \ No newline at end of file diff --git a/terraform/aws-iac/sectool.json b/terraform/aws-iac/sectool.json new file mode 100644 index 0000000..6618a28 --- /dev/null +++ b/terraform/aws-iac/sectool.json @@ -0,0 +1,7 @@ +{ + "provider": "bitwarden", + "bitwarden": { + "api_url": "https://api.bitwarden.eu", + "identity_url": "https://identity.bitwarden.eu" + } +} \ No newline at end of file diff --git a/terraform/iac/sectool.json b/terraform/iac/sectool.json new file mode 100644 index 0000000..6618a28 --- /dev/null +++ b/terraform/iac/sectool.json @@ -0,0 +1,7 @@ +{ + "provider": "bitwarden", + "bitwarden": { + "api_url": "https://api.bitwarden.eu", + "identity_url": "https://identity.bitwarden.eu" + } +} \ No newline at end of file diff --git a/terraform/k8sapps/sectool.json b/terraform/k8sapps/sectool.json new file mode 100644 index 0000000..6618a28 --- /dev/null +++ b/terraform/k8sapps/sectool.json @@ -0,0 +1,7 @@ +{ + "provider": "bitwarden", + "bitwarden": { + "api_url": "https://api.bitwarden.eu", + "identity_url": "https://identity.bitwarden.eu" + } +} \ No newline at end of file