Skip to content

Instantly share code, notes, and snippets.

View devops-adeel's full-sized avatar
🎯
Focusing

Adeel Ahmad devops-adeel

🎯
Focusing
View GitHub Profile
@devops-adeel
devops-adeel / audit.tf
Last active November 15, 2022 10:20
Vault Baseline Configuration
resource "vault_audit" "file" {
type = "file"
description = "Vault Audit to File"
options = {
file_path = "/var/log/vault_audit.log"
format = "json"
mode = "0000"
prefix = "vault"
}
@devops-adeel
devops-adeel / registry.tf
Last active March 25, 2022 19:23
MVP TF module for TF-Module Registry for every TFE/C org.
variable "tfe_org" {}
data "vault_generic_secret" "default" {
path = "secret/github_auth"
}
data "tfe_organization" "default" {
name = var.tfe_org
}
@devops-adeel
devops-adeel / aws_user_vault.tf
Last active April 22, 2022 16:28
Vault AWS Auth Method - with Rotate Root Credentials invoked.
data "aws_iam_policy_document" "default" {
version = "2012-10-17"
statement {
sid = "AllowVaultAuth"
effect = "Allow"
resources = ["*"]
actions = [
"ec2:DescribeInstances",

Keybase proof

I hereby claim:

  • I am devops-adeel on github.
  • I am devops_adeel (https://keybase.io/devops_adeel) on keybase.
  • I have a public key ASB4CR6QVZ3DpLsjF0xMnIFCm8huRq4_u9sEoEZdYY-OSgo

To claim this, I am signing this object:

Keybase proof

I hereby claim:

  • I am adeelahmad84 on github.
  • I am adeelahmad (https://keybase.io/adeelahmad) on keybase.
  • I have a public key ASBtCsSJa2qo8UeTY4rGmIKinM2ogrOU4lWHMaAxDCsYpwo

To claim this, I am signing this object: