earthquakesan

#!/bin/sh

set -eu

echo "This script should be run locally to publish tf providers to the harbor registry."
echo "Use case when the runners only have access to harbor instance, but not the Internet."

SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
TF_DIR=${SCRIPT_DIR}/../deployment
TF_PROVIDER_DIR="${SCRIPT_DIR}/../tf-providers"

earthquakesan

# Cluster creation

export GKE_PROJECT="ADDME"
export GKE_PROJECT_NUMBER="ADDME"
export NETWORK="projects/${GKE_PROJECT}/global/networks/default"
export US_CENTRAL_SUBNET="projects/${GKE_PROJECT}/regions/${CLUSTER_REGION}/subnetworks/default"
export CLUSTER_REGION="us-central1"
export CLUSTER_NAME="cluster-1"

earthquakesan

import asyncio

from azure.identity import AzureCliCredential
from msgraph import GraphServiceClient
from msgraph.generated.users.users_request_builder import UsersRequestBuilder


async def get_user(user_name: str, client: GraphServiceClient) -> None:
    # The query used here is the same when searching for users in Azure AD via web console
    query_params = UsersRequestBuilder.UsersRequestBuilderGetQueryParameters(

earthquakesan

#!/bin/bash
set -uo pipefail
IFS=$'\n\t'

export AWS_ACCESS_KEY_ID=""
export AWS_SECRET_ACCESS_KEY=""
export AWS_SESSION_TOKEN=""

ACCOUNT_ID=
ROLE_ARN=arn:aws:iam::${ACCOUNT_ID}:role/AWSControlTowerExecution

earthquakesan

#!/bin/bash
set -uo pipefail
IFS=$'\n\t'

export AWS_ACCESS_KEY_ID=""
export AWS_SECRET_ACCESS_KEY=""
export AWS_SESSION_TOKEN=""

ACCOUNT_ID=
ROLE_ARN=arn:aws:iam::${ACCOUNT_ID}:role/AWSControlTowerExecution

earthquakesan

Create test certs

See link

openssl genpkey -out device1.key -algorithm RSA -pkeyopt rsa_keygen_bits:2048
openssl req -new -key device1.key -out device1.csr
openssl req -text -in device1.csr -noout
openssl x509 -req -days 7 -in device1.csr -signkey device1.key -out device1.crt
openssl genpkey -out device2.key -algorithm RSA -pkeyopt rsa_keygen_bits:2048
openssl req -new -key device2.key -out device2.csr
openssl x509 -req -days 14 -in device2.csr -signkey device2.key -out device2.crt

earthquakesan

export SERVER=example.org
export EMAIL=mail@example.org

mkdir tls
touch tls/index.txt

cat <<EOF > tls/openssl-ca.cnf
[ ca ]
default_ca = CA_LOC

earthquakesan

[INFO] Log message 1
[INFO] Log message 2
[INFO] Log message 3
[INFO] Log message 4
[INFO] Log message 5
[INFO] Log message 6
[INFO] Log message 7
[INFO] Log message 8
[INFO] Log message 9
[INFO] Log message 10

earthquakesan

# Create CA & Server Cert

## Create CA

```
cat <<EOF > openssl.cnf
[ req ]
#default_bits           = 2048
#default_md             = sha256
#default_keyfile        = privkey.pem

earthquakesan

{"type": "FeatureCollection", "features": [{"type": "Feature", "properties": {}, "geometry": {"type": "Point", "coordinates": [12.352752685546873, 51.34433866059924]}}, {"type": "Feature", "properties": {}, "geometry": {"type": "Point", "coordinates": [12.410430908203125, 51.355488840149505]}}, {"type": "Feature", "properties": {}, "geometry": {"type": "Point", "coordinates": [12.390518188476562, 51.365778905402145]}}]}