Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add info on how to provide CONJUR_* variables in Windows environment #51

Open
mdzieciol opened this issue Apr 1, 2020 · 5 comments
Open

Comments

@mdzieciol
Copy link

PS C:\Users\marcin.dzieciol\Downloads> C:\Users\marcin.dzieciol\Downloads\summon.exe --yaml 'pass: !var pass' .\pass.ps1
Error fetching variable pass: exit status 1: level=error msg="Failed creating a Conjur client: Must specify an ApplianceURL -- Must specify an Account\n"

I have a problem with providing conjur communication variables in windows.
All instructions in README is related to unix environment. Can you add info about Windows configuration?

@sgnn7
Copy link
Contributor

sgnn7 commented Apr 1, 2020

@mdzieciol, I have not tried using this in a Windows environment but the error is saying that you didn't set some variables and https://github.com/cyberark/summon-conjur#configuration sections shows what environment values you must have set before running that provider. .conjurrc and .netrc in your home directory should work if you want a static configuration just like it would in Unix.

@sgnn7
Copy link
Contributor

sgnn7 commented Apr 1, 2020

Also, if the question is about setting variables in windows, you can do so with set and setx.

@sgnn7 sgnn7 changed the title How to provide CONJUR_* variables in Windows environment Add info on how to provide CONJUR_* variables in Windows environment Apr 15, 2020
@Jishin85
Copy link

What about getting credentials from Windows' Generic Credentials?
Many pipelines, including our own Puppet module, will save host and API key credentials inside Credential Manager > Windows Credentials > Generic Credentials
Exposing those with a PowerShell script would potentially leave that script too much power over that Windows box, defeating our purpose of putting it in security.
Same with editing the Conjur Puppet Module (or any other Windows module we have) to save credentials inside a .netrc file.
Would it be worth opening a new issue for this?

@sgnn7
Copy link
Contributor

sgnn7 commented Apr 24, 2020

Hey @Jishin85 ,
That could be done it's just that we don't have that done yet. Opening up a new issue would be great as this one is just about documenting the current process.

@sgnn7
Copy link
Contributor

sgnn7 commented Apr 24, 2020

@Jishin85 PS: unrelated but I'm pretty sure our puppet module can use the creds manager for credentials and the windows registry for the config: https://github.com/cyberark/conjur-puppet#pre-establish-host-identity-on-windows-hosts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

3 participants