Power shell modules connection manager #3

rleon-thales · 2024-05-03T21:24:28Z

No description provided.

To Domain Module: Cleaned up params. Removed pipelines. Cleaned up error handling. Added a few params.

Cleaned up params. Removed pipelines. Cleaned up error handling. Added a few params.

Cleaned up params. Removed pipelines. Cleaned up error handling.

-Added new module for ConnMgr-Elastic Search. -Added new cmdlet ConnMgr-Main - Generate a Connection CSR. -Made tweaks to $body variables made them [ordered] for easier readability and predictability. -Tried out adding some enum to variables. Also employing ValidateSet param for parameters that are numbers or have dashes.

-Created Google Connection module -Found a bug in CMConnCSR cmdlet. Fixed

-Fixed a some typos. -Created new module for CM to DSM Connections.

-Changed clear-text variable name in Elasticsearch module to bypass warnings. ES Module still has secure method of passing credentials. -Fixed bug in Info module. Set-CMName was set to POST instead of PATCH.

-was copying copy from module to module and wanted to cleanup indentations on the help data -also added a few missing examples

-Also fixed some typos. -Remove private key demo from GCP Connection example

-Found errors in Elasticsearch Module due to using it as template for Loki.

-Added new module for adding Luna HSM Servers -Cleaned up some code in the Loki module. -Made some fixes to the Clear-CMRefreshTokens cmdlet to NOT delete web-ui tokens. -Added "ps_module" label to all tokens generated by the collections.

-Finished Luna HSM Connections (Partitions) module of API Playground -Added "Connection not found" error to all Remove-<connection> commands.

-Renamed Module Folder for Connection Manager from: Connections\ to ConnectionsMgr\ -New Module: ConnectionMgr: Luna STC Partitions -New Module: ConnectionMgr: LDAP for CTE -New Module: ConnectionMgr: OIDC for CTE

-Added Complete Module for Identity Provider Management. /v1/usermgmt/connections/* -Added overlooked help text in a previous module. -Updated README

-LDAP and OIDC IdP Module -Connection Manager Oracle module -Connection Manager SAP Module -Updated README.md

-Fixed typos in SAP module. -Added SCP Module -Added SMB Module -Updated README.md

-Connection Manager: Syslog Log Forwarder -Found minor issue during code review.

-Added Connection Manager: Salesforce Module -Fixed an example in a previous module.

anugram · 2024-05-16T13:30:11Z

PowerShell/CipherTrustManager-ConnectionMgr-LunaHSM.psm1

@@ -0,0 +1,960 @@
+#######################################################################################################################
+# File:             CipherTrustManager-ConnectionMgr-Loki.psm1                                               #


file name need to be fixed... looks like the intention is to implement Loki.

anugram · 2024-05-16T13:30:32Z

PowerShell/CipherTrustManager-ConnectionMgr-LunaHSM.psm1

+# File:             CipherTrustManager-ConnectionMgr-Loki.psm1                                               #
+# Author:           Rick Leon, Professional Services                                                                  #
+# Publisher:        Thales Group                                                                                      #
+# Copyright:        (c) 2023 Thales Group. All rights reserved.                                                       #


Copyright year can be updated

anugram · 2024-05-16T13:34:41Z

PowerShell/CipherTrustManager-ConnectionMgr-LunaHSM.psm1

I am slightly confused with the purpose and placement of this file. Shouldn't this be inside the folder CipherTrustManager. and also it seems to be a duplicate of ...
/CipherTrustManager/ConnectionsMgr
/CipherTrustManager-ConnectionMgr-LunaHSMConnection.psm1

I am skipping the review of this file.

That file shouldn’t be there. we can delete. I didn’t realize it was going to publish that far down. I forgot it was there.

anugram · 2024-05-16T13:45:30Z

PowerShell/CipherTrustManager/Connections/CipherTrustManager-Connections-IdP.psm1

+    Write-Debug "Start: $($MyInvocation.MyCommand.Name)"
+
+    Write-Debug "Getting a List of all LDAP Connections in CM"
+    $endpoint = $CM_Session.REST_URL + $target_uri


$target_uri is set to "/usermgmt/connections"...
there is also an API for listing all external identity providers /auth/id-providers

I am assuming in this module we are just referring to OIDC/LDAP based identities associated with user management tile.

Feels like the /autg/id-prividers section oft he playground only has to do with actually authenticating people. not "managing" the connections themselves.

anugram · 2024-05-16T13:49:14Z

PowerShell/CipherTrustManager/Connections/CipherTrustManager-Connections-IdP.psm1

+            return "Missing LDAPS Certificate. Please try again."
+        }
+        if($root_ca_file){
+            $root_cas = Get-Content -Path $root_ca_file -raw -ErrorAction Stop


Thinking aloud here... can we do or do we need to validate the CA cert here to fail fast in case of a bad cert? Before hitting the CM API... I do not even know if we need to do this...just a thought

anugram · 2024-05-16T14:29:05Z

PowerShell/CipherTrustManager/Connections/CipherTrustManager-Connections-IdP.psm1

+    return $response
+}    
+
+#Connection Manager - Connections (IdP)


do we need to replace (IdP) with (LDAP)?

PowerShell/CipherTrustManager/Connections/CipherTrustManager-Connections-IdP.psm1

anugram · 2024-05-16T14:47:30Z

PowerShell/CipherTrustManager/ConnectionsMgr/CipherTrustManager-ConnectionMgr-AWS.psm1

+    .EXAMPLE
+        PS> New-CMAWSConnection -name MyTestAWSConnection2 -description "This is my Test AWS Connection" -access_key_id abc123abc123 -secret_access_key xyz987xyz987 -assume_role_arn "arn:aws:iam::123456789012:user/johndoe" -assume_role_external_id EXT_ROLE_ID -aws_region us-west-1 -aws_sts_regional_endpoints regional -cloud_name aws-us-gov -metadata "red:stop,:green:go,blue:ocean" 
+    .EXAMPLE
+        PS> New-CMAWSConnection -name MyTestAWSConnection3 -description "This is my Test AWS Connection" -assume_role_arn "arn:aws:iam::123456789012:user/johndoe" -assume_role_external_id EXT_ROLE_ID -aws_region us-west-1 -aws_sts_regional_endpoints regional -cloud_name aws-us-gov -is_role_anywhere -anywhere_role_arn "arn:aws:iam::123456789012:user/johndoe" -anywhere_role_certfile mongocert.pem -anywhere_role_keyfile mongokey.pem -anywhere_profile_arn "arn:aws:iam::123456789012:user" -anywhere_trust_anchor_arn "arn:aws:iam::123456789012:user/johndoe" -metadata "red:stop,green:go,blue:ocean"


someday, we would love to add examples of how you can do the same with secrets in CSM instead of directly passing them as string-based args... someday :)

that would definitely be cool

anugram · 2024-05-16T14:57:42Z

PowerShell/CipherTrustManager/Tokens/CipherTrustManager-Tokens.psm1

@@ -27,8 +27,8 @@ public enum CM_TokensGrantTypes {
 $target_uri = "/auth/tokens"
 $target_revoke_uri = "/auth/revoke"
 $target_selfdomain_uri = "/auth/self/domains"
-$target_authkey_uri = "/auth/auth-key"
-$target_authkey_rotation_uri = "/auth/rotate-auth-key"
+#$target_authkey_uri = "/auth/auth-key"


if we are not gonna need them, can we just remove them?

I guess. I didn't add those initially, they were already there. I can double check, but yeah... if we don't need them in the module, we could drop them.

rleonrj912 added 24 commits November 28, 2023 14:19

new modules

7d68371

Minor changes

b23ee04

Update CipherTrustManager-ConnectionMgr-Main.psm1

344591a

Update CipherTrustManager-Domains.psm1

73bb017

To Domain Module: Cleaned up params. Removed pipelines. Cleaned up error handling. Added a few params.

Code cleanup #2

0d9e380

Cleaned up params. Removed pipelines. Cleaned up error handling. Added a few params.

ConnectionMgr Akeyless Cleanup

24b2ce5

Cleaned up params. Removed pipelines. Cleaned up error handling.

Code cleanup #3

7631548

Cleaned up params. Removed pipelines. Cleaned up error handling.

Removed enums

cc9650b

New module and fixes

61ba85b

-Created Google Connection module -Found a bug in CMConnCSR cmdlet. Fixed

Code cleanup and new module

30941fd

-Fixed a some typos. -Created new module for CM to DSM Connections.

Fixes

1b36ec5

-Changed clear-text variable name in Elasticsearch module to bypass warnings. ES Module still has secure method of passing credentials. -Fixed bug in Info module. Set-CMName was set to POST instead of PATCH.

Formatting cleanup

817551f

-was copying copy from module to module and wanted to cleanup indentations on the help data -also added a few missing examples

Connection-Hadoop Module Created

244250c

-Also fixed some typos. -Remove private key demo from GCP Connection example

Connection-Loki Module Created

5cac767

-Found errors in Elasticsearch Module due to using it as template for Loki.

Modul to bulk clear Refresh Tokens

3a99af1

New Luna HSM Server Module and fixes

00cc51d

-Added new module for adding Luna HSM Servers -Cleaned up some code in the Loki module. -Made some fixes to the Clear-CMRefreshTokens cmdlet to NOT delete web-ui tokens. -Added "ps_module" label to all tokens generated by the collections.

Luna HSM Connections module and fixes

f179c75

-Finished Luna HSM Connections (Partitions) module of API Playground -Added "Connection not found" error to all Remove-<connection> commands.

New Modules

6a97bd3

-Renamed Module Folder for Connection Manager from: Connections\ to ConnectionsMgr\ -New Module: ConnectionMgr: Luna STC Partitions -New Module: ConnectionMgr: LDAP for CTE -New Module: ConnectionMgr: OIDC for CTE

New Module Upload

e3c7ca8

-Added Complete Module for Identity Provider Management. /v1/usermgmt/connections/* -Added overlooked help text in a previous module. -Updated README

New Modules

fb8ec05

-LDAP and OIDC IdP Module -Connection Manager Oracle module -Connection Manager SAP Module -Updated README.md

New Modules

1a4c76d

-Fixed typos in SAP module. -Added SCP Module -Added SMB Module -Updated README.md

New Module

c98f062

-Connection Manager: Syslog Log Forwarder -Found minor issue during code review.

New Module

06338a4

-Added Connection Manager: Salesforce Module -Fixed an example in a previous module.

rleon-thales requested review from anugram and jmseguin May 3, 2024 21:24

anugram reviewed May 16, 2024

View reviewed changes

PowerShell/CipherTrustManager/Connections/CipherTrustManager-Connections-IdP.psm1 Show resolved Hide resolved

anugram reviewed May 16, 2024

View reviewed changes

fixes for pr

a500382

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Power shell modules connection manager #3

Power shell modules connection manager #3

rleon-thales commented May 3, 2024

anugram May 16, 2024 •

edited

anugram May 16, 2024

anugram May 16, 2024 •

edited

rleon-thales May 16, 2024

anugram May 16, 2024

rleon-thales May 16, 2024

anugram May 16, 2024

anugram May 16, 2024

anugram May 16, 2024

rleon-thales May 16, 2024

anugram May 16, 2024

rleon-thales May 16, 2024

		@@ -0,0 +1,960 @@
		#######################################################################################################################
		# File: CipherTrustManager-ConnectionMgr-Loki.psm1 #

Power shell modules connection manager #3

Are you sure you want to change the base?

Power shell modules connection manager #3

Conversation

rleon-thales commented May 3, 2024

anugram May 16, 2024 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

anugram May 16, 2024 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

anugram May 16, 2024 •

edited

anugram May 16, 2024 •

edited