Secrets #6

carlosvalarezo · 2023-09-01T18:13:42Z

No description provided.

…rely in the AWS SSM Parameter Store

…st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps

…r error related to characters missing due to the nature of the shell commands

…ust owners

…t was saved

…the cluster

…y workflow

…t out the problem: cannot open /dev/tty: No such device or address

…annot open /dev/tty: No such device or address

…en /dev/tty: No such device or address

…not open /dev/tty: No such device or address

… flags like batch yes and passphrase-fd to sort out the non-interactivity tty

… as expected

…decrypt the just created KVM ARN

…the artifact in order to download it in the second job

…eter

…ws ssm command

…s. Also, it pushes the secrets in aws ssm as securestrings to use them in the cloudformation template

carlosvalarezo added 30 commits August 25, 2023 12:17

updates the name of the branch

952ab78

creates a new workflow to create the kvm and to save the secrets secu…

fe912e5

…rely in the AWS SSM Parameter Store

updates the command to get the KVM ARN

6cdff68

updates the command to get the KVM ARN

85f02f8

updates the command to get the KVM ARN

97e7eac

updates the command to get the KVM ARN

7221e73

tries gpg to encrypt the files using these strategies: import the tru…

265386c

…st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps

tries gpg to encrypt the files using these strategies: import the tru…

43f2801

…st-owners first, then import the gpg private jey without the passphrase, encrypt the file given the email of the recipient -hardcoded- fpr a test and skips another steps

splits the trust-owners import command in two steps

d7de65c

uses base64 in order to avoid errors like: missing semicolon and othe…

dfb74b6

…r error related to characters missing due to the nature of the shell commands

uses file rather than env variable for gpg trust owners

6983445

show the content of trust-file

bdb633b

includes the missing env var

3b2a33e

alters the order to formerly import the keys and lately import the tr…

30ca049

…ust owners

alters the order to formerly import the trust owners and lately the keys

2f6da02

removes the armos and sign flags from gpg command

395bce7

lists the files to check if the file got encrypted

30a95d0

updates the path of the encrypted file and show the directory where i…

8496d30

…t was saved

removes the openssl command and uses gpg to encrypt the file

5c076b3

removes unnecesary code

d231b36

creates fake kubeconfig file to test the encryption without creation …

4b289bd

…the cluster

uploads the artifact to the github workspaces to be accesible from an…

16c6291

…y workflow

downloads the artifact and decrypts kubeconfig

c31dc3e

adds the missing env vars

2145a60

shows the values

33e11d5

shows the values

ca8b775

shows the values

185598c

checkout the code

f9bb720

lists the content of GITHUB_WORKSPACE

ec47724

shows the env vars

be3973a

carlosvalarezo added 29 commits August 29, 2023 14:03

enables GPG_TTY env var and flags batch and yes to gpg command to sor…

c549df5

…t out the problem: cannot open /dev/tty: No such device or address

removes flags batch and yes to gpg command to sort out the problem: c…

4b380ee

…annot open /dev/tty: No such device or address

adds the passphrase to gpg command to sort out the problem: cannot op…

9dd1a6e

…en /dev/tty: No such device or address

uses the default-key flag in gpg command to sort out the problem: can…

161ec4e

…not open /dev/tty: No such device or address

checks the recipients for the encrypted file

b00a754

reduces the gpg command to the minimum flags

0e6b6ed

tries another gpg command with the passphrase as parameter an another…

82e8db6

… flags like batch yes and passphrase-fd to sort out the non-interactivity tty

decrypts the file in the final destination once everything is working…

0fdf8d3

… as expected

removes the GPG_TTY env var

0e03cfc

removes unnecesary code

ecc0b52

creates a new script to setup the gpg agent. It includes the step to …

bc04661

…decrypt the just created KVM ARN

updates the artifact name

407d40f

includes the dependency between jobs to let the first job to produce …

bb8b6a4

…the artifact in order to download it in the second job

updates the name of the artifact

9c4d5fc

updates the path of the downloaded artifact

9b11d6e

lists the workspace to see the files

f8c2818

checks the env var to be used in later steps

d58f42c

updates the env var assignement

7eef591

inserts the very first securesctring in the aws ssm

4c5bacb

adds the setup credentials step

d65e852

encloses in quotes the arn kvm

04720db

fixes typo in aws credentials env vars name

05c2a28

removes unnecesary code and includes region flag in the aws ssm param…

4e62aae

…eter

updates the region both in the action to setup aws creds and in the a…

4d9f31f

…ws ssm command

updates the aws ssm command and uses env vars in the respective place…

c7ce018

…s. Also, it pushes the secrets in aws ssm as securestrings to use them in the cloudformation template

uses the vars value in the region field

ee9de1e

adds the flag overwrite to do it when the secret already exists

4bacbda

fixes the typos in the aws ssm commands

9428fc7

Merge branch 'master' into secrets

341d7f1

carlosvalarezo merged commit 0311573 into master Sep 1, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Secrets #6

Secrets #6

carlosvalarezo commented Sep 1, 2023

Secrets #6

Secrets #6

Conversation

carlosvalarezo commented Sep 1, 2023