Skip to content

Latest commit

 

History

History
90 lines (70 loc) · 2.27 KB

README.md

File metadata and controls

90 lines (70 loc) · 2.27 KB
Raw

How to get creds to Jenkins

docker login
docker login registry.aquasec.com

Example json Object

Run the following command in your instance:

docker login registry.aquasec.com

This command will write a json file with credentials /root/.docker/config.json:

$ docker login registry.aquasec.com
Username: [email protected]
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

The config.json file will look like this, and you can use the following command to create a kubernetes secret with it:

{
    "auths": {
        "registry.hub.docker.com": {
            "auth": "chbadlrbgasldJHVBLAIDFBVh8ah =="
        },
        "registry.aquasec.com": {
            "auth": "kGVTFKDVlyvCvyDLycvLYUlcLYbLuyuy=="
        }
    }
}

kubectl create secret generic dockercred --from-file=.dockerconfigjson=/root/.docker/config.json -n jenkins

Install the Jenkins Aqua Plugin

Manage Jenkins > Manage Plugins > Available (aqua security scanner)

Manage Jenkins > Configure System > Aqua Security

Version: 3.x
Image: registry.aquasec.com/scanner:6.2
Aqua URL: https://uybasiybksjdfbvujbsdvkubsdvkub.us-east-2.elb.amazonaws.com:8080
User: administrator
Password: password

Boostrap script

The user-script.sh provided in this repo will prepare the instance for the Aqua Training environment. The script can be called independently than the IaC or used as a local provisioning in Vagrant as for the vagrantfile provided.

The script accepts the following arguments:

  • -u username | the username used for the SSH user and Jenkins authentication
  • -p password | the password for the created user
  • -b boostrap_version | the tag or branch from where the additional resources pulled by the script will be taked (e.g. the Jenkins Helm value file)

Example:

./user-script.sh -u test -p password -b <branch>

Test with Vagrant

Test the user script used as the ec2 instance bootstrap in Vagrant

Create Vagrant machine

vagrant up

SSH into the Vagrant machine

vagrant ssh

Clean up

vagrant halt
vagrant destroy

Credentials are by default set to be test/test