djpbessems/Packer.Images
djpbessems/Packer.Images
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Change vApp type;Generate all user passwords
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Danny Bessems 2021-03-11 09:05:38 +01:00
parent dd62c29220
commit 9cee2e8f3d
2 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
scripts/ADDS/payload/scripts/03.Users.yml
View File

@ -1,16 +1,15 @@
Users: Users:
- DistinguishedName: CN=Jane Doe,OU=Employees,OU=Non-privileged,OU=User accounts - DistinguishedName: CN=Jane Doe,OU=Employees,OU=Non-privileged,OU=User accounts
# Password: Complex42!
Password: "{{ password.janedoe }}" Password: "{{ password.janedoe }}"
MemberOf: [] MemberOf: []
- DistinguishedName: CN=John Doe,OU=Contractors,OU=Non-privileged,OU=User accounts - DistinguishedName: CN=John Doe,OU=Contractors,OU=Non-privileged,OU=User accounts
Password: Complex42! Password: "{{ password.johndoe }}"
MemberOf: [] MemberOf: []
- DistinguishedName: CN=admJaneD,OU=Administrators,OU=Privileged,OU=User accounts - DistinguishedName: CN=admJaneD,OU=Administrators,OU=Privileged,OU=User accounts
Password: Complex42! Password: "{{ password.amdjaned }}"
MemberOf: [] MemberOf: []
- DistinguishedName: CN=zzLDAP,OU=Service accounts,OU=Privileged,OU=User accounts - DistinguishedName: CN=zzLDAP,OU=Service accounts,OU=Privileged,OU=User accounts
Password: Complex42! Password: "{{ password.zzldap }}"
MemberOf: [] MemberOf: []
--- ---
@ -18,3 +17,12 @@ Variables:
- Name: password.janedoe - Name: password.janedoe
Expression: | Expression: |
& "$($PSScriptRoot)\..\Provision-VaultPassword.ps1" -VaulSecret $Parameter['vault.secret'] -Username 'janedoe' -VaultAPIAddress $Parameter['vault.api'] -VaultToken $Parameter['vault.token'] -VaultPwPolicy $Parameter['vault.pwpolicy'] & "$($PSScriptRoot)\..\Provision-VaultPassword.ps1" -VaulSecret $Parameter['vault.secret'] -Username 'janedoe' -VaultAPIAddress $Parameter['vault.api'] -VaultToken $Parameter['vault.token'] -VaultPwPolicy $Parameter['vault.pwpolicy']
- Name: password.johndoe
Expression: |
& "$($PSScriptRoot)\..\Provision-VaultPassword.ps1" -VaulSecret $Parameter['vault.secret'] -Username 'johndoe' -VaultAPIAddress $Parameter['vault.api'] -VaultToken $Parameter['vault.token'] -VaultPwPolicy $Parameter['vault.pwpolicy']
- Name: password.amdjaned
Expression: |
& "$($PSScriptRoot)\..\Provision-VaultPassword.ps1" -VaulSecret $Parameter['vault.secret'] -Username 'amdjaned' -VaultAPIAddress $Parameter['vault.api'] -VaultToken $Parameter['vault.token'] -VaultPwPolicy $Parameter['vault.pwpolicy']
- Name: password.zzldap
Expression: |
& "$($PSScriptRoot)\..\Provision-VaultPassword.ps1" -VaulSecret $Parameter['vault.secret'] -Username 'zzldap' -VaultAPIAddress $Parameter['vault.api'] -VaultToken $Parameter['vault.token'] -VaultPwPolicy $Parameter['vault.pwpolicy']

2
scripts/Update-OvfConfiguration.yml
View File

@ -109,7 +109,7 @@ PropertyCategories:
- standalone - standalone
UserConfigurable: true UserConfigurable: true
- Key: vault.token - Key: vault.token
Type: string Type: password
Label: Vault API token Label: Vault API token
Description: An access token which has permissions to read/write to the Vault secrets engine Description: An access token which has permissions to read/write to the Vault secrets engine
DefaultValue: '' DefaultValue: ''