PUBLIC ARCHIVE

NOTE This repo is archived. This is still available under the licensing terms, but is not being actively developed or updated any further. Please see DelineaXPM for active projects.

TSS Chef Cookbook

Provides a new resources: tss_secret, as well as a sample cookbook. This resource allows integration into Thycotic's TSS.

Requirements

Platforms

• All platforms supported

Chef

• Chef 15+

Custom Resources

tss_credential

Actions

• :read - Retrieves credential from Thycotic's DSV

Properties

• name - Name of the attribute
• username - Thycotic TSS Username
• password - Thycotic TSS Password
• tenant - Thycotic DSV Tenant
• secret_id - The secret id to query for

Examples

Retrives a credential the /test/sdk/simple credential from the dsv vault and stores that value in /tmp/tss-test.txt.

gem_package "tss-sdk" do
  version "0.0.1"
end

tss_data_bag = data_bag_item("thycotic", "thycotic_tss")

tss_secret "tss-secret" do
  username    tss_data_bag["thycotic_username"]
  password    tss_data_bag["thycotic_password"]
  server_url  tss_data_bag["thycotic_server_url"]
  secret_id   tss_data_bag["thycotic_secret_id"]
end

file "/tmp/tss-test.txt" do
  sensitive true
  content lazy { node.run_state["tss-secret"].to_s }
  only_if { node.run_state.key?("tss-secret") }
end

Testing

• Install chef workstation
• Create a databags folder containing your testing secrets
• kitchen converge will build the resources
• kitchen login will login to the instance where you can verify that the secret contents have been written to the files.