A plugin which allows UrbanCode Deploy to get credentials from EPV via AIM, and to get secrets from Conjur for setting up a CI/CD workflow
gradle
- Login to UrbanCode Deploy web portal and go to "Settings > Automation Plugins"
- Click "Load Plugin". Select the complied plugin file and click "Submit"
- A new plugin named "CyberArk" is installed
The plugin can be used in process designer of "Process" & "Components", by dragging from the left menu area under "Security > CyberArk
This function allows credentials to be retrieve from Vault server via AIM CP.
| Name | Description | Example |
|---|---|---|
| Name | Name of the step | Get Password from Vault |
| Path | Absolute file path to clipasswordsdk | /opt/CARKaim/sdk/clipasswordsdk |
| Safe | Safe of the credential stored | DevOps |
| Folder | Folder of the credential stored | Root |
| Object | Name of the credential object | Website-Conjur-httpseval.conjur.org-cf-spring-app-01 |
| AppID | AppID defined in PVWA | UCD |
| Name | Description |
|---|---|
| Username | Username of the credential |
| Password | Value of the credential |
| Address | Address of the credential |
This step gets a short-lived access token, which can be used to authenticate requests to (most of) the rest of the Conjur API. A client can obtain an access token by presenting a valid login name and API key.
| Name | Description | Example |
|---|---|---|
| Name | Name of the step | Authenticate Conjur |
| Account | Organization account name | |
| Login | Host name for authenicating Conjur | cf-spring-app-01 |
| API Key | API Key for authenicating Conjur | |
| Conjur URL | URL of Conjur cluster | https://eval.conjur.org |
| Proxy | Proxy address for calling Conjur REST API. Leave it blank if direct connection is allowed | ipv4.124.244.113.228.hybrid-web.global.blackspider.com:80 |
| Name | Description |
|---|---|
| AccessToken | Short-lived access token |
| Name | Description | Example |
|---|---|---|
| Name | Name of the step | Get Variable from Conjur |
| Account | Organization account name | |
| Access Token | Short-lived access token | |
| Variable ID | ID of the variable | db/prod/pws/db01/serviceA |
| Conjur URL | URL of Conjur cluster | https://eval.conjur.org |
| Proxy | Proxy address for calling Conjur REST API. Leave it blank if direct connection is allowed | ipv4.124.244.113.228.hybrid-web.global.blackspider.com:80 |
| Name | Description |
|---|---|
| Variable | Value of the secret |