Skip to content

Commit

Permalink
Add bitwarden HELLO_WORLD item to eclipse-pass for secret retrieval
Browse files Browse the repository at this point in the history
Based on
https://gitlab.eclipse.org/eclipsefdn/security/otterdog#bitwarden

We want to store the credentials like

```
"organizations": [
  {
    "name": "<org name>",
    "github_id": "<github org id>",
    "credentials": {
      "provider": "bitwarden",
      "item_id" : "<bitwarden item id>"
    }
  }
]
```

Two problems I believe

1) I think `credentials` should be a list, not an object, so

```
"organizations": [
  {
    "name": "<org name>",
    "github_id": "<github org id>",
    "credentials": [{
      "provider": "bitwarden",
      "item_id" : "<bitwarden item id>"
    }]
  }
]
```

and

2) I think we should add via jsonnet, so more like

```
orgs.newOrg('eclipse-pass') {
  credentials+: [{
      "provider": "bitwarden",
      "item_id" : "23801ca4-fd27-446c-b5af-b07b0108f443"
    },
  ],
}
```
  • Loading branch information
aforward committed Oct 24, 2023
1 parent 8c28a04 commit 5b940ef
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions otterdog/eclipse-pass.jsonnet
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,11 @@ orgs.newOrg('eclipse-pass') {
default_workflow_permissions: "write",
},
},
credentials+: [{
"provider": "bitwarden",
"item_id" : "23801ca4-fd27-446c-b5af-b07b0108f443"
},
],
secrets+: [
orgs.newOrgSecret('GH_PAT') {
value: "********",
Expand Down

0 comments on commit 5b940ef

Please sign in to comment.