Skip to content

Commit

Permalink
Record Azure role assignment details
Browse files Browse the repository at this point in the history
Stores an encrypted version of the Azure contributor role assignment
details (viz, 'subscriptionId', 'appId', 'password' and 'tenant') and
adds a script to extract those values and use them to print commands
that will set the related environment variables as persistent Gitpod
environment variables within the current repository (see [Environment
Variables - Gitpod Docs](
https://www.gitpod.io/docs/configure/projects/environment-variables)).
  • Loading branch information
Warwick-Allen committed Feb 14, 2024
1 parent 75e451a commit 1878e18
Show file tree
Hide file tree
Showing 2 changed files with 57 additions and 0 deletions.
37 changes: 37 additions & 0 deletions .azure-contributor-role-assignment.json.asc
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
-----BEGIN PGP MESSAGE-----
Comment: https://keybase.io/download
Version: Keybase Go 6.2.4 (linux)
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=uegT
-----END PGP MESSAGE-----
20 changes: 20 additions & 0 deletions scripts/print-commands-to-set-environment-variables.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
#!/usr/bin/sh
# Author: Warwick Allen
# Created: 2024-02-13

# Outputs commands to run to set the Gitpod environment variables for the Azure role assignment.
# The file containing the variables (which includes a password) is encrypted with the following
# Keybase PGP key:
# Keybase Key ID: 01018704f1fe0ed3d28a324d6a4c256b7801f885102bea5925bbf286c7efe3e490ac0a
# PGP Fingerprint: 9f92c49840acbfade9e8f6382dfa90f79b24929b
# PGP Identities:
# Warwick Peter Malcolm Allen <warwick.peter.malcolm.allen@outlook.com>

keybase pgp decrypt -i ../.azure-contributor-role-assignment.json.asc 2>/dev/null |
perl -nle '
s/
"(.*)":\s*(".*")
/
$k = {qw,subscriptionId SUBSCRIPTION_ID appId CLIENT_ID password CLIENT_SECRET tenant TENANT_ID,}->{$1} and
print "gp env -e ARM_$k=$2"
/ex'

0 comments on commit 1878e18

Please sign in to comment.