Skip to content

script to install twistlock defender and client certs #136

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
anshupande wants to merge 20 commits into from
Closed

script to install twistlock defender and client certs #136

Changes from 6 commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
1643e56
script to install twistlock defender and client certs
anshupande Jan 21, 2016
728d067
updated .twistlock in while loop
anshupande Jan 22, 2016
2259a46
updated the logic
anshupande Jan 22, 2016
f97b83e
also added twistlock.service
anshupande Jan 22, 2016
e621dfa
corrected typo
anshupande Jan 22, 2016
90958e4
removed twistlock.service to get all the logic in twistlock.sh
anshupande Jan 26, 2016
f4a97f0
URL parameterized
anshupande Jan 27, 2016
614f229
parameterized URL
anshupande Jan 27, 2016
9472e21
hiding password
anshupande Jan 27, 2016
1362a9b
split out separate sections of the command using \ to make it readabl…
anshupande Jan 27, 2016
58964df
moved logic to install client certs in separate file so that each use…
anshupande Jan 27, 2016
de10aa0
updated logic to run twistlock as proxy server
anshupande Jan 29, 2016
6fffd01
add twistlock clientcerts for each user
anshupande Feb 4, 2016
fe0c3b0
created a fleet unit for twistlock
anshupande Feb 4, 2016
1d2be00
created fleet unit to install client certs for each ssh hosts
anshupande Feb 6, 2016
71df700
reverted changes to add_users.sh
anshupande Feb 6, 2016
b26db38
reverted changes to add_users.sh
anshupande Feb 6, 2016
18ce3ec
update twistlock defender
anshupande Feb 9, 2016
993180b
made chage to twistlock.sh
anshupande Feb 9, 2016
ae48936
updated environment for fleet
anshupande Feb 9, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 24 additions & 0 deletions v2/setup/twistlock.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
#!/bin/bash

source /etc/environment

HOMEDIR=$(eval echo "~`whoami`")

sudo docker run --rm \
-v ${HOMEDIR}:/data/ behance/docker-aws-s3-downloader \
us-east-1 $CONTROL_TIER_S3SECURE_BUCKET .twistlock


while read line; do
etcdctl set $line
done < ${HOMEDIR}/.twistlock



twistlockusername=$(etcdctl get /twistlockusername)
twistlockpassword=$(etcdctl get /twistlockpassword)

curl -sSL -k --header "authorization:Bearer $(eval echo $(echo $(curl -s -H "Content-Type: application/json" -d '{"username":"'$(eval echo $twistlockusername)'", "password":"'$(eval echo $twistlockpassword)'"}' https://adobe.console.twistlock.com:443/api/v1/authenticate) | sed -ne 's/.*"token":"\([^,]*\)".*/\1/p'))" https://adobe.console.twistlock.com/api/v1/cert/client-certs.sh | sh
Copy link
Member

@chr0n1x chr0n1x Jan 26, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

split out separate sections of this command using \ to make it readable (multiline)

Copy link

@bryanlatten bryanlatten Jan 26, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

still needs adobe twistlock URL parameterized (this is a public repo!)

Copy link
Contributor Author

@anshupande anshupande Jan 26, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@bryanlatten this is temporary URL given by twistlock but yes I will parameterize it



curl -sSL -k --header "authorization:Bearer $(eval echo $(echo $(curl -s -H "Content-Type: application/json" -d '{"username":"'$(eval echo $twistlockusername)'", "password":"'$(eval echo $twistlockpassword)'"}' https://adobe.console.twistlock.com:443/api/v1/authenticate) | sed -ne 's/.*"token":"\([^,]*\)".*/\1/p'))" https://adobe.console.twistlock.com/api/v1/scripts/defender.sh -o defender.sh && chmod a+x defender.sh && sudo ./defender.sh