From 7e5bf28182c8df4bc85c1c51d969ad1ceb8f7712 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=A4=D0=B5=D0=B4=D0=BE=D1=80=D0=BE=D0=B2=20=D0=94=D0=BC?= =?UTF-8?q?=D0=B8=D1=82=D1=80=D0=B8=D0=B9?= Date: Tue, 9 Jul 2024 15:46:09 +0300 Subject: [PATCH] ready ldap --- DevOps/Hashicorp-Vault/image-2.png | Bin 0 -> 7002 bytes DevOps/Hashicorp-Vault/image-3.png | Bin 0 -> 8766 bytes DevOps/Hashicorp-Vault/image-4.png | Bin 0 -> 5676 bytes DevOps/Hashicorp-Vault/image-5.png | Bin 0 -> 7961 bytes DevOps/Hashicorp-Vault/vault-with-ldap.md | 196 +++++++++++++++++++++- 5 files changed, 194 insertions(+), 2 deletions(-) create mode 100644 DevOps/Hashicorp-Vault/image-2.png create mode 100644 DevOps/Hashicorp-Vault/image-3.png create mode 100644 DevOps/Hashicorp-Vault/image-4.png create mode 100644 DevOps/Hashicorp-Vault/image-5.png diff --git a/DevOps/Hashicorp-Vault/image-2.png b/DevOps/Hashicorp-Vault/image-2.png new file mode 100644 index 0000000000000000000000000000000000000000..ca1f6eaf5bc29bdaf3894df99aad6c5c8a25792b GIT binary patch literal 7002 zcmeHsc{o&W_%~^f$dY6kOIfmKOGdUN#3WflCRrxi#Mr}3l7#I0I$vQVF?PmYvQA7H z5(Zg@EMqJ&#+dPr{(Ap-|9P+L_vi1r&UManU+0|re(vW!=l*=|`-!=4Zp3l+@>v!Z z77pXPw;!;uuWLl5l;*a^rlG%Po>XpRo+2b!;rIXj2OwNRl zoQ?CVM_Rr9Hh4A&rL#@tCN@M7EQD^evU2S~j(@Qo>(gHT;zT66*N+2iA*fR!mwpLt z-FOn!GC1oa+Anpru&(-)-x-Q;#-z%Z|`ru~SGLESZ&g zOeG-OnQpvOO%=UHJ6>{I1HI_lxQU;0i=x>LA7l@XfzF%IU6*X4(P(rm0{-?K7fS@f zRJSi&jb2>2zY}nCO~azRubv(=q6OT)Ht_rn{&lMVkY?lidff|Ad>j&DapJ*(id;Wh zlg=t`iS0Yh7fop>R!S8#>jbnL7iYX#t>>TG5h^?VF4wQ*2^bEPdwtn?q2xOuxtGsf^$zeDWCtXo1O3Rr;>!7osQ2aIJ+xa~=n z11G+OIfm6SfGDL-e6~Ec!_G=^rBSmUVS$*vcsfijA~A`USn-%w=qRk$S^L88L@=FV z zyU<_pldFL@F9&R?7SP8<1M@C@Bl(+Gbkq7p;&IPES-H;dZl6Al37YbudQMGh2IciU zw)9(ddXYvb-_2$30Bm^C;(+#?mI9p&k5DBd{6cJZvUcT^EpZyzhzSogqCWiYm^Y&+ z6mK2tp)xr%51y-;ah0t z4TsWMV95|V-Lotl4;s))_q-g$Mzwx88313;Hk1na7%s`Wf`k3W{W^3C-LPDA|GT5M z{^G~^`~iICpFi1|=>rR%kIK>Ht&vVme#j+yUmxv-3=BDUg)Jtqxlu=+QE9r9ZI zT~4t4lZeM~UWvXx{oSbMbJo(k{E-61dEU~Zqemr@;|&a_Zi{EI$+0b0P4!xG|T zbp6Kn-lq{CmTzCpujO&J0SLP;9g=!##3bBSYmCZj*=K5c^EK)PvF~u@N@{)9`)$j~RL$6}_YY znT}e#KvtDx(p;SEq*5@riIl|ytjbmwC+r1kg0p_Y-v;wZ#_D;7XCWOSN$K8!jSiRv z|9qqKczr1ZiYr1+@Q=+~S%Nv|1$OTYv_H+JZ;XeN?yrJ`BWD`(+)sgM&=dHe>z&Z} zKffJK!CKJ4H-q&hAeMFwCf2OfyE|yryR^cG$6Fjs zN%nBJ)9bytnkn7|#PPT{OAV(KA){*yk%G4Od*0#Uaga(#y5JhcEmVQ@ zc{EqE5MB;<*@>HfXnn=A;Z?SG<2iLs6+MRowqyG1b?MmMN&4a zIn#p$nst8@Xxfzf6*c*Lj~ZrLN}szdz5t<~7B)EXkXwLPJ8O!#Cp?DYpyT|?mZrO9 zq|ukEBIKGu+Ycjv7!{g_t{3iBGVtSIEvy!>9GHL)HaDuLCP~~V*@@e@5**sn*8OF6 z9(;idc8I=icnf#6Y95RVgIWWe=;ZBIXY`_k#}@wF84Ln>F-axd zD_{R7*od-V5K(q7Igdbj!=IVHOC|1{{3o0}E=ob)Kexepl*&S#l0{;YAu9t)kefiE)|KQ*z(=Psk1lvF11XH=qhZB4M&>tkl zw0rZZ%Rd3F%T#{0o&|8k6Mio0s>nbeRTylsSM*$H{5Gp4eAQcZXk752}(p@f2nBE zHQ&d5e@$9+>uL9cPH|>FsTgtV-S%FqXBDP`>v@(Ix4kQ}He19lQR1Bl#5C*Rg!^Dy z;`NZq@HU6Woh*CbbzKOyyKmW^&(=*PINv`s0Gr}Y%+ zjAu_Zafrk7pnFv!lBVm4mP0m8u2FG!gJxWi<-9L~b$(8j0nqrW^9FWf~@d0=L}{?sUZ56Tk`OQ#yatAr>yr{;JiPC%EyDxsEc(2hJqb}3LaxMU-*i6 zUDB}&{o2dD!x^78($J0_%kK34ihc-ot*>s@+#9E{`f$*O!zJY6)RPFT!l>Lxr)yw` zp#7j7#{u+wN7A|oCdfQczO0Y1oX|rRpF6M!9VAXu?kHX!4xV~fLug$5$Tic3|Ejdw zlEpo2A|B{0K~U5~Ip?%FmRcytxDCjnPJYvnXkFf|vHvObN>3o#b=XmT_pwHvngCHf zQ++)%Ikd!aU4}nVVnWRG&^lOOVMPOU#$67Ccd^r6LU^}*HTrTsYKP5!w0koh_tU`9 zclb%&lIofoU7R+b6GoRPx$5s_HB!4C0F{B2Q9=E6a2 z-sZP?&uAgdPe3!3D^1Xk02g6d<>2@(uXYp6;u^mVzr&OmWl-)xU2t;d@ZeWJUjx28 zk2uMXdd4NbKi`E-7{WkoiO5srJJljK5bYsNwSybp?uxQdp@8cNj~pwqAFzJ%84ILc zZy^WPq0=8-eLLkNqopMCeSc&P+*2%Sd7NlTS#p0rSmF*`G6Q10*vVmt>1+56^_dV$ z@32Y-0!TJ*t$YVo?vPUYESh2ALpaL`n%w6TquWY&U{^U}9)7M{eIViA%D*A@(ZjH& z;*PAN?_anw{+1wO->>XkhpBas(iCnS?y?&v3C@gqHDF+1PI!RYs97xpdw2->*28qa;l0EK zNAOF*8Ys5yml}5)R!#-bAACiYU?r?pe8!J8r!+~y6hqG8DgcE}^_eIYpny}pccql4 zk}ws~9%}drS21BTP|9cC>4jX8OUUibaXI_q#xEhoRG1pjP^;BueRQ8RWC{Fo;qlEq zRHjX>fe0$KLZ-r`OVVoMPq|(4RSE`PzULI1@Af1wpI0r%7~5vl6Kx%zgR~lV)fpaG z-R6I4wC_k>>-LyCU$^d#mz&kK66zRfieuAsA3=ZC!;M`Vdlzn@Lz%vdfs9=L6QJW* z{Bxr~w6#M6&jms|L-RZuzg?E*Lymo0k`ziEEeni1H4uKsCgfR^rRuU%dJ?j1uk4f= z_xP+gPaDUxHQJ*)<5qpYw!4KL)y7qK0?HlYqk2FBMIsEmr7Tbzjk<81|K-w0S= z5VQ8G>}CZxU>fhQ^Y6|3#oaZe=Lq>TtTFd!g@5A^XE9P|?$R)=-+%;9X!gcg@{VC0 zF;#&ARD=tEdOPGMusi!j`4JsMw9tWo3oN=I{Dmthy_BQ_c3Epjd-EhqnfB$0SBuM&|7$sI%mf@SDU?2zd z_9)qPkFtkfCf0-m8Ys}9F1-xv8)|UOu{guClLH3O$5(9ui)va|AkM$OJ))V-0u6BV zw04(tjZfhsnnu$@BzPe)H*647%;K!lyNh2pirdPc`gUe8Lmf$;_}0(vD*Jdb@s$3Q z6duKu8`%w(RHR!pB0oAUmnMZ0&t>|;NE(n_#bQO{S-%L3^FJu>)4rN4P z>bibw-I;J`&OZ^)1J9NI_VG)=G~~Y>lV7(@a)TmrE}M_)N?E{#<>zVL&q??2%1`5M zXQ`@^8475(Fmg%0P=U-$)zAsKfXWRGQf~#W!C|dW+TC+NubO-yVt(b@VxJ$?gY-24 zM|UDc0LDil>^Vqr_yi-1h}o5b6Td53-0!N`=ZG1JG5xgpi+A$**OG$+2y{5pcLSnX zHnt#vHx{uNZuD9WEQqh8f7#GUdY5~5dRDcV80KC(X0&al0kNRE?-X@Yw_emGdRRin z=s5G~!H8YH+u{9{dM78jz_oc@_u7Z#_^lA0VAX_{=dTGf`74p)u@;m-3^u#=oo5u* zwux4LT*Rs)v8Fa{9>1-&|HE?2s$DElF|l;d@A)Dw@e~H>?2sWEGOW!njAJ4_@3BJ^ zfaoxw5H*K2I;FR+)4XpH%p@x~F&4~WUh^GeJ!bzPhe6hK>pt^yiB5P2(qq?p%#Cn%~WJ1QYuQPgXy{F{yOdv$$*Z01Y;+9E0=d~k?8I9 zmX*nXGMOc0=}eN#b8vH!P~(ghEIL^|_RuxjvHg5Zhuf2WTCe@8$J;$p`wE|s$FbwD zjtCG^T$Je8Gz1UHKdgc6VDTXr9lp>7BTLF?;7YFPegj!{>V)X#io$N+S$^t_Z|Xw3 zNaq(t5cthsjojhMxlcZ;nT6z79rLYppWPPMb?FQ5kEj%j)RTd>y%I>u)(9u~pGC%(&^a@Rm#PPHix*zNiCwVdgp_|G+$` zU#2zSW}8gQ>s*@o{RuRG>=+ok*2AYVo)Kgu6v#M3smeD?)fD`qnD+extoZ?3#mSbcSCUvb;i-SclL-vwMrulF9u>J3i z|7%IA9M)-@%~Otz%$Cj>QzA;|dE=P7G%Go@UJ!Bv_}{M<-?Me-$z{Tf`iDKgmUg*X z&JVpE>m5<3vorr1K6b)iG)o+>@eGjI_GGOu{QZ3VH33bV{Wa;G;bg~|Do+{0Fb?j( z5P3bqvb2ttwKrJRN8@pCF=m#9O)r`36w|8L3bcXz$@W(>}K*y+V zCS+`sgaoXr#;)~-lT!T{C`UR{a6yRP+D4;>ai zU54LWatrgkaRUolu{iSsng#uLqtkhJshiuCgavktis3VQ?Y()AJa{9A$P4g zyZUVfp&QC8$`g;OfAX<%j0;eIdJTTG)gi@YY$a+@RIt`UUr%lo4o((ItMSh@`BX z0L|u2qp;+K8mHfH?fP%31l`S0tUD6UfiY~4O9(>?Qd__0c9EUoUeCdT4po-rZCYEM2RsZE5($;JqmnPD3(ll-%Zbd8NceKJ%vz?N>Ej zZ~13gB>W6Twt7jQ@GR@GFMZT!x{o_>&a|U*BX`SL<&vBJE~WZE%gF6XsRByq;4{neCS(u!}1NT7G^ws{+Q>jZ@O9S%@`&+(s;OQ%I+ zuDOA9s`jO|bbMHkXoT)>POd#+jG|@7b-#o2pNz(-=F@lo1S`j-K5xJJumXDIc8uYj|iLJ-Cv~IE2-VGW;iIb{|^>s%>Oq zBiERAr!zar{d5n+{@Dk{HqnDc0?*IGrDH;X6F0|Ai};8tC6T=c;SQ3d%VVaCgp(hy(s%|)F!Tw}DX)%a*96}ZV{Ni4_P&6s-*S?BR#!Jrm7 zJ>D+4?EXy;0Od)$c{F~xE-_@OLSQ0KMo>tTDtX29LGH+P^W;dnsszOn7HIJ3>t8q- z0vJ113xDw5Zr$LO?NFd~`v(>(Kx z-~skN4>n$>L>r8EIeMRuR%PFNoQOvAcz;Ld*;A2lDVGjdZWliXM?KvohB{A(O`##u zu6Z+T;cv3)3AFq6AJj0M^FQ3l`7=m!OjbEPf!SaS5GZRuV zMe;?i*a_1nN@2EIX?+A@U<4Q{^hLVYY?!g<6>v9YfbQ#Ru^I3*l-_`Jfff=Vpb6eWl~8pPfs z_@-~)_xJBF*Oli=p6AY;bCPpEpK+h4=Rj3*5(W}1EG%+$HDx_4EF5pl>z710nB&j* z@=Po&RxEYprv`r5I~F^s9HkUHemT(`uUIL5&~I-qj@bD+NT!^{;Zako-Cd7&4-7)) zI2-A*R#xKSm`B9lF0znJVy^h-( zzbr`P#KocdtsruB;>|4Knn!@e_SNHO?!s6Em=8T9OG)fGA~2dJ{*w)JsuL#iX6e$C z8`t`8fS)hH9rOHo#ZJOM;aIpreOPZ%uuQTyUH^RJ(hU6*k6>R??0<*U%7{x;DdZ@M zMS%NffT50#OEY1p<>`=UFF#*V+n~sab=rWC%Km-PGFSLW?OX-A7)_0i14-E>!pSY7dmU(HUK#AISlGMMe*K zDh|S_m97>V<_YNo!$SoWjMgiDh0Af^vfUb6FhnU1#*(=b8qx0@)O9apB!;LUG zxNOZ4qTBKIPE7YTchM{|MH`>mCNafwN=$BAC4$+4G9IuOrXk65fj+7{vK(X4{Gedl zNBDy&X}6d3$WTY9!f>=094Z6)G`K8#EZTH!KT0Vte%eMfmLf=V0=w{I&nwe>@7}AV zKr)=}WpUc!ODcHJq9`Z6DC8hN{^z3SRZ<&pd+IvPI;vg!CLHx;N#;Ed%huh-My=v~ z75{LVR zKG(MdkUkq?CnwXQpQflR>TnwIm1}H=#ocmIYuwnH*h}xbSa*5IrLkyPNMj@Qt`-pB0PX~`(6u!K;Jy+W{v?oLB2kXk*UL~O&bwM(a+)|^i!alvf_jJ8T9ptGx{*F>T5wP+%TMh&T`Pdh1fzJ}29Y?j>CQ2Ay?pXnDZ8^o;g(9xWrwn5u? zbF>VVSlP*-Us-hSrP)36?ATvyOd4MYmQL_J1!0!XFDj9BwNRBFP?m&{e(Q^!{rzdPh}?VGZM)f~v(s9U zNpBbYtjBZ#t6|#4=fo!~BR|Q0Gi85P7E2aM_$(n1D4h&!rZsIElmV$Eq(aO+hFyLg z=S7Yj88VS5$W*5g^y}@?ndAR*+xg|Mtk2U`MdI7#<06DT3nAF)DJVdbQ>E`-Ae95G z4u>YD+6m^uLLbo^lUMdU>w95=)4Qy;i08cjFiQ?vgG;cVSU_Gi7!TRRDTIS2?eq&M%N=lAp!7xCB9=c>A^)7dG3i|R^Eca!N` z1!tXylb_+hHWfd0w)nwUTz4`#EjTH$A~ zQXfZ0fuf2Gx}C7!!7E`DUgtl+AFRL@-ggwkWOhW*&4&I3D@kEY=^_xf$5)`hykSXJ%kr8V!5{&#b<^7& z*1fIY5L-cj&feLR{&5cDOU=`b<+!>-*!7LkiOQ2V9rD9|uyM128N+Y*{rs|d|D?3c z4J}%l^-bgOakh#KxA5%9rJtp9qkXrX)0hPqOn;WZADmLnywq1CvEJbJNOYmb+srE< znDVXuvL6-!1|a<;2r7vx9Vic$T6+sWx>u}?dWrW1ZAe$yn^r8h08d@aAA1f7R&$N6 z8#LUJK>qYb^a~IgK|^QBbnxN6x(&aF-a4hZ!_q(`l^Uh4FxB`hOHCBPUGr`)buqMd zJ3z-$A_HfpVy?HG`VW`$A z`UkAiom-WuEmK%OXKCIBaZzRD{&^RL(Ign<*!EU&f;eYrkr5vPWFJ=mi~!eX#~RI2Gvs?grF$#cl3?w1e#k>ZQ=r~a^UFS(-tDswumNPY}?L9>y~ z-7znv8yU%Vtu?D{Q3tPWJ)ZgkVI1{VnU5L?T1oEWYZja)gMIIwb#3|3Y+t_YmW`*A zc+|f%n-;#gVPbOcH`mk}B7Ns zxH{dKcj(U?xSE_jQrTfM$iUTtQ~}x;{+%vst)9_@*Uig?q?0SvYN%k5T%b*OPNz(* zno7s2ihp!hJKiFy=qIVRc9=w)YqSqCDX!+%L*9P%hWHWu$41TWKk;Y_ zmrwc2_OONT2)|ikNO;Tnmt11uHe%ifkOn>^{Zl+xxYn%JSY6_*`0D>ci4R|vMGlGLWgr|2q}7t;-to4!3NnS zAqbt;LiC7_ocf%D5A%zbG!U}`p^sYy7RMV@C6`+Ygil_?1UJtsq)T2w3rz2F5!l%} z^+h1=jmggh(+n;Oa0z*Y1$llk_qbGs;8t9@Zs=5YBue%qtlX>+DksZYtb(>Wx>$Dc z_cc0ZD=eA7Vn{doh65|4t5x`Iz>ZNEYMoQ|SkuB+MNfs=heC~hw%tEJokrUSMZ~M# zIKa?rGE%zZ=qDoPAe-ExVU#%GVTTV za9pO}Lj-Y2k66qP1F`X2fjlOup?(v3*FEnf1KVrP{dp}fp)cyrwI^O*FfKBaFRF^g z|Jrq<(W%zHnLu{zG}*xcS>XNm0n|;}ryX2Z=xFmHIAo9n|-01EZF7-EC9bk+ktRRR*pA4P?3# zP^NVNzLlQhpcJ`nTd>Tg8ot)M7X~W-M(QaeE0R#_^M*4QYDu4xrjt6`?pPh0qvQ3J zD@bOUQ60R|U0!Jfi(Sq;|42wP|GZWi$dy5YWx zT%7zk-mE+w)py|q#XK*bg>~&lbyUanzkNUPXje-t$MRss7k|J9A}h(CS0PYfBGN7P zRs36wZ6=9Xc!^cJlbz$3e;Y6Gx={7% z!z+iwBJ%^2Cr6;yGt4oDOHbiWy&;`;JGzS4tz6QCyh5~_~~O!u=Ksk zEXAA|=V!cSnSq6+&g63T>66|@QzULZbbd~mn}Y)ea)PNfn>6ho0ml%j;wji~&wLqH zU!P_M1DSM6nFBJORR+GIcWs9;3GLP5ZBPvd->CiMh+LwUlW3X^VYBC=z^yr9BwH7a z=GW3t%Q*W%2in53drnV_@y`zBDt@Tf=zX6{l9~oNoV~F$0>v-#>bn@=5|6Q4R{;$0 z1JLZiW6+(sWbKd^%h?Op_o9VyjP6s>|*?r*cqe+|RB!5$($CPd}6o zA&otHc;}z-LKl-s+;7Z@E91NoI0o_ou+r95uaJnt(OYFL7^6sx9tW0{Q}SZ-cKF-tWz(OfChuqny50 z*9$EOAvuDR3q&Tr3T3=5825%&7AzjxAv+v4!{6DIaVeq)!wf6h2(7ynDDRexZlA=0 z^bc-Y&HM$P-V1eWW1}qarUmvq``i?=Izw(&qQ%6#LAPA6pHyP#hyML6ER@h*t;0@_ zjcr7C(fQ{0E4~h1p`fgUDZg`0b~|fTLB-pEwhs;}A+d6X=$;^|i`ft# zoE>I9SC?and2!6d0+VOqHK!c|-LMwo0XM*d#U$})z*_NQ+s4?0oPyn4`RcZK~`!KWjKGs&oJPABEL;0 z@UM47it&!F6>D^9|Aw~`;>x})pWpjEvepk>h=+_pZ|p8c&O3l}6lltt^qb=wR7zS_ z*`fPu27lipq8GCyHRhVV@Dz|w0q_PO7kjRQQY%lCf0tyZho4M`5Mf}R9KbRqLc$2{t&=8?oxYpwHfP$87JGF=^rjN(;L11?^ zm0wj3esv?27Fr1CJrcnH=@hPgM?v0K1&B1mU!`T9Q}kf;hpdQYo+k~db@$BiWAS;0 z3*4t&;tOGqv`0v_*7QZoRaa+l>q9-aZ9L;x*`i16ha{7}yr_)%fH=A*;Z*^aV)vTh zcj^3EBOkDS?p4?$Q^sV^m7iFO4Q|=Vi}v1E*Y0C79xAE}|H0X9Y=4;T2oLbu!=~zvvomqMyl`*<)Hi!ihyWgy?}+Bv zENw5)<9byEC@y4&c*v)00#6%3ChSE?Zdxe0%z8S%mmM0{>W^IaQ}lpYL^WKTZmV7? z$rlfb(swh@VjJe&Hms$=B7g@^BKsuqjkc(_q&gVU^6&SkXWx7RsEQfnX;4Z$P<`Si zyZJnX=P84jlGyH;Jt_f?Fj(w#{;;h#JGtbJ7xTe?J=vlWwz=Q;P;+Y|g+iA{BJu8q zp@W~ySAA*5EIj`US8X9G7JQ?~q(NtL#t$rhBPHb~p!spo+KhNe5lB$A9F}3Kvsaif zF?g_<=Zdo-TEZg33k)G>*5LaQm6NFA=*Jx5dPQTjd53rV!!5rB={<2g$1euzl(R8P zO3gA|)twKMlkG(9Hmlc6ww8lRc}%2PD6R~Bw%LC!@e+qVP3}4-qk^w||2&ZvJ(VSk zE3ot`DFW?f@JI(tR;d>bP<^fk)nTT{NLFw8Ld~F*QCs+)AW#S%g^sJACWv#S%79Q@ z?z$T=@s;t7mBVJ1^R2yi!VaamWUHfco>UnC-vScNlW;F6xYldbSOPG!Yo2T=fNwN1 z9kBcI6&p&fgVvYJ@!%_JJT@`E7#N`wpP;$IZ123%R9t%@Ned)3IoOs&7 z!CI#2U`Syf^FkyswUVx5Gbl1(D@CSyK_+PUJz(K?e&lWehYZ+?Du zKTu!QNUon$6=F#PDQ?LEJJ9wpb~vDfR01uQwHSCREHiVa1?2@_vkbzO2e;BEP#k3g zCt_4!C?O4IsUGGCkdB^5p+hrgg9Z7&3QJm2P$G8hle-FRJN#QMz#?1w#>|Y3;52a|{~F=R^)hgBl)1>yX>3EcjG>FHD74L+tg9fq>hU~cKCb&S^Z}L=9?03OM666> zkkjV2VooJeHtkYl;Sm07{>O%YCSEZYI6q!$P-vD{+93BiYRZhg$6~kwZUBVs?yDwg znm+nC&-aKiuh>lBEW=CX48_GMVfI2(kAre#%sb*S`q=XWz+lh(SZ8a8;XZ1jfQ6xB z%Mxo~d%eQ&YnMOGMIz&5!zJ@*4Ckk>9|NC0r9C=UQ@=K#Ulm3cm zj5;5}bZLg~D*o3M!XCwXTaLti{eQCB0fWR2By9imkgy0k-#B7*O&*2H{wK>NF+N*> zSoj^xrGHX%itUqkr9#9PPEGdx+*>BjzJ1CUTI9TN4?ih}okUJvf z>WV@y)qE((d%>e?ZyOoFp=uJK5umW{oF+Irj1-g|*|tCa3grKRB8mVXW#)-~5!9{`eOABOpBrA2>koaVElletB?9J_edbqgDq%Y< z%f3*QPOsoqo0ccioq5om_iZ(3PCcZk!9wbB%AAPgUr9q0w7XHD8@a5a)I$X>b%R41Aq-fBTnHg^^$+Z}x@KZ*bUB z+MUDEgVH=s;ZscxFn!*OVGr7=2Z&r)n(E{JM2h4OfyGB32))&sqC)GJW(o9uGrsUG zdeQtUKx|+1f(x{f;^u3!u9kQ*x>8|5YqB~dldFEy9x0d`neW`(`~s(~AwRA=0lB%v zy4#xcROxMavg#~i-+0pY5qSpcgIIUwK!J<>`f4qJQfk|q`$B1QFhDl8QR=?Wr=$^e zgYOuRbXxEfA@URM&o)rWt#`AYk&z}+DtUB-y+DqcH2ubN0ZM0`=lEhqI6cDqSLp*T%=9QTd^@zy|{h=#hy>6|G`fOAakLE06tCQnBJ^ z>_Kuyn;iK^BaaEh-wVXb^v})A&v8r9ons&uu1J4~hzuB(8DqJGY-uwcrs3gIXRgDy z)>ar~PnR@;-TKvQOmd??&85?N707>my-OKpS}84BeImWY9|G z`?qTlRrrkq$9xU8wfCZH=bG9|*2bztgAvUjF1ySls< z)MrVI_*!pw2|UMNLkR)v-P+NxcaBkwtSnbG(G1rUC974vG{Iz&- z4n>f%s1@VsB?&liVpT>ngIA%(K{bhHOH-fn zJHP>Rk&9aPgpiu3vD4I5A#pl-5IUXu9GZ;rwOiPa=toA)x}xOH9Nst>oTU-_gFD}7 z^(;OyEIE%On`1EdsW~S@BHKP;cNjV{J%zz77NZGLJBVaaJyE;X28wud+ z(Fs)lZBKw=4C70|w1~WaC8s?`a)!`PmJt2hYYP9uFb4!Pgq{F~VolUX7A*&D*Y1F_7*rZb0;-@N^&QS}Ez8^!itL5b9`aQ_2ge%xEa Yvr*0->29eREX+gw8Bn=W(faNG0IxU}00000 literal 0 HcmV?d00001 diff --git a/DevOps/Hashicorp-Vault/image-4.png b/DevOps/Hashicorp-Vault/image-4.png new file mode 100644 index 0000000000000000000000000000000000000000..46195fd2f30a9b1aebb11094aacfa8d9acd9e198 GIT binary patch literal 5676 zcmY+HWmr^S6Tp{Hx};%g5R{P4r59MbLoh%GGiT1sxxbkkuA!!YhfReI0)g-pVNfj)2&EQ~EiqAnH`zkM5eP(jq6n4N z@j%&oyO&nbj9)}+nD-3ZLphglJ9TCMGxO{By(8!$w)7%5rl|7CMW!xsc<1;JU6S-5 zbbk=x3_Z84lE!}`2=#$|P1yGS?qbO=gO>z^0$51Up?LE8gC*NamKg{^s7-_*k^MlN zPAL$k4-P7QpTm~bB^J7WI~TfCOcOGY8!%Z41oa;oc~SYIqR?041c=423Ulrd+!>`< z{as%-59;%LyO}ZPOG)_tWB;VrruBIr9P)?NB;W3Fm%IYQ~);Ew(zXqB8jfe6R#GB{E@tEeNa zL@osRU9{K@MXM|{(&lfeob_!o+AOXnC&q1$q?biJ&Z#Z8=`xC>2d3(ltb+!9JoZbC zZPXWNN8U%ZOE^#L28;)JJj?#A1@5=W9J0K$csu2q6{#QyD>kVi5U9Lno`k2ujg+og zt_!eah4Y>(eWnc_Wf_g43=$wA`gQ;-qkqBjFw8IFT%R_S|I6{##_{Rwzd;Ih*v9)y zQai;y0f|fkciw%ywue9q>#v!+#|>3EhdEb*NuFuH$})@3&TwT9Z6>KB>##(;bbl%s zUHt5?h{WjqNDtrJIu#S5rcNc#so#S4tq{5oR8f>5mfm@`cXXCVEVbVMV*U21H5QEF zj94xS$mf;C_BH2CdZiu26x-T;<%uPm>SRd9GW^VeU6muIi~IOJZQ_Uu$wXeAFAeS! z?+}y1?b}#;{+1grw+OT2ZxgiFl+Z|UaLaUBbk6kTU+`w|{jl~CY_h>Gk>z2os$Ov} z1KTD}Y06n7h5!091uc@2|9W}f*Y=$JL^JJcHfk_T%;?73t#{s!KL2R**BeGH%*2(J zo6KF!@0+_;tL+UT=V9m+IcI}(Ge1V6@3+rZ(ZH8Z@A@3nV=qq5V%!o}xuYVV`kRxz9g@T4~MG; zUM}Xm$ZM2nhQIG=d@e!r*YIw{I(<#o+hH@iRD3>G^^V|1Ttd8ZnJk=@lbLch{-1qO znd)|}m^uQ1jn)YJ3H5ZmgX>Pn)~CUwFu=U@1dxVPL}C$aAItQ^8i7l^tHz48a9 z#U!L+y6GpnM7oLJsJiqzWrmAV1gULOM%_cWQc07hnwGOIXS+no7mE<}9+~!b_9c|J z!^Z3%#qWp_`8PhRNWJkVch)Q83<|DnXJVxL9VakJ!86H!7uni);)*y|&kkI?)Egb= zO1}-cO5!LeYEO*$%3L`13%q?Oa89wNwY&Zb>p3j<*(*Xz{c&64VO2plm68{+4SX#_e{Pfw2+)qFBWoT;#sy;whRBbYi*U} zr@|-MY?rE{CMmfIb8qkogKrv`%4V#(U)AwIandil7xg>xrVmtN*7s+SR&{4c4N1Wp z_TWzui##g7ESqlUCrpEx$Efs()o09zLzPnFKi%EzZmqUgyw;kG-y~kwJ4hKq4spg8 zyz>)hyV&&ZW#BWnDlI9gUsc-d>yJ<96Fu6D$;<2drNS2<0&Q;|8?VKEk;yugRkYrl zd#=YqAj5n=7*<4-XXFj(d9wkXwiDZNTMebt>v|qui&2zJR7G~-rwu#p*&WQdtvTPz z4OOqo9P3hR<12z)6yJ2rDPf4+#BbZ*48i-uO87@Q78=uP?<#3qS61g?e7NWf$01=G z7~eK5I4`bHyekF`7e+nrVI_DX#*lqmQJxOdbC~GTZk4a3pcD7O&gI^YW@FWbcN}R9levd+6FrF1?aNj?`((WcNIu}u>2d5sN6*H$i!1Ac6NUQW^m5E~TG z#N?O?-qOCW)nfUUQ1f|3socuO%9F-qfZwh|d2#b-KdjUD5&EbBrfaY!f~_$Gs;om! zV>9+b%IJ}3S?|3QUBJss5D@7(CYV9t`at;O;`sRa`r$x-4H9De7a5cqe(ZbGw9wkH z3<6?RXL1YzyN>Ww(~iGuK-9?UzzJ$DW|ufAqGcbq0SC0jF*)d!s9ah4$uH8nkBBud zI{7saw2>oefz>F$A^sIu%>T&{vNsDpijLYFEmcKWNDdafaqGKVn4r7`a(Q@#xy#hI z>QUH|68lwJ6>#g{-X@J)Un_kdF+YWT=zUd-iVpO-OJdYltbLNNLkIuMgwSJli4QFw zvuMKva&C5eXcq+*F9reKOSQe=H6VYB2IRRrv>jl%2Qkp?givBX27m|~1p(RSf}jEo zNQ5d-vL$p#`eXU#0J&;GvKk+7`u`hLr+~Yx+iN}**s?n5UDY81T^~Cr9;)}ik&S;q z!J{GsI6c_+^8oII6b4G1DFy`zP|Cvvz-L?2!}4S4X@F}(W2}J-9MK(!`F8(4^a5Dw z0^A@se`y}TVksJEVYLr%Dhw$kpwZYI-hTuf5OfQdgQ3We9VnmLs8QlpJA@VL&@g@6 zD>`m6fJ8tDS4*7<12Udq{JyhCKaXD(jTLyasuGY-ZW&(3QBNCE^Vd+l&+{x!>nh(a zldP?gOWVpkvw7qf*AOInHSV;r_uA6t1!du$o}0CkquOnG-P}(v0o*Qm-Wj^THRbAb z6}t!AQTxu8$%gosVNeP9GZT}e18+LZ;YVM!6491nnPXbBE8fqUnq-8-OZ}VElqX;C z24p0{%jfzy^o(j%x|cf7c4|oU=dfv$uu3b26XOR5lr-sp6D@grcTzfF^Jhz1ix_1 zr*=3AwmORv^0G>)T$^mmT$Jn|BGnq*E~OcABln^TH%9*%kLSi-_zQE@*$Rso{$9Ma z18b4D$hDj}trMTX`fRYd+K2aDqnVF`JW{- zr_-IyP)Gq~f=4Kl0`mPqfMhtl; z4P{#@u;plEw5m*_;}Ga!Q6`~`GsQ&%qXlrH`mrb!q!YHKvlZZa9bZx z__T1ww{X>T;9BpFh*6VIz(kP5TgVQuxKh}}IF#k&?%{vM`A3>PxVW8TmGT8w@erqL z+wO1P+Eaj83Y1Oe4Q!&7nQHtcE12WNRb2>M(!ypc`Z;JT;){*0977({%b9=Qu@tVS zH za7H197OM*KVW0a@Cbz8yVc{~a5F}qasx!lx*ze@NCr+y7Zk~~8Km1*-2ZgXv0#%>6 z&rYMIp*!Kvp29RM)kayGc_6FxX!&oZVX2dK8jFtYxQz>vH z>_XA#9X|v5rZ$NGoUqXs(k?@9{Fs!lA!z?0+~SdMyZ6EF0N=n+(3%IKu+AfHe*m4( z*X^NG46wpybPNOU#NMrW<3G^HH&ES7(l7i8Ak*O35q&UR4)A|<&XyxLE;M|frdXQR zrVVdl=v?>nF<{tw?=<~!+hYG#@lxx&+91XAU0~NaZTG3m-=mLMZg*U_CgioP3m4^M z&QR^7a@FCHf2pA#=pCP+*4{d8ILZiV_32d8s>jq)N52@thnf_m#GYZ;=H z_sJCRXgH1jjl(*oU@K`Ab$EJhqv7m=axQXSm%pV~^z~g7Kq54BH6{hdtfUa{ z(+5fe{DE3+d7au586@GmMs{YHNJ%kst=p`+c-s-WoZhWrv0@p##;V^>I7C?#n(R43 z{F)j4faDX*A?37muC$LO)j`#-T3e8Gyf%XCQfni}xQ(?Y{#QYoUUt;)27PS_$;TNu-*bMx9=Ck=rpWq>P{0=%tFdt| z^`b&y%j3^%WAuUyN~GBOa{)7~CEvI_7<>iS%k~>9A|YOk^?~!eeA6PrC{gKx7+xwB z&FcwDicibOBd&1=^y_S7Uf>4+-^wMiNUz6f^)OtD9%3dhKOoQpN-ih43BZe#8E%F) zNZWm6POs5QIH|AD6Jh&MW-W^4HMd@-Lp2}Q)t@m@dY2@UZEen{e1&$W>giUYgKbrS zri@Bmly#pzofG^n>q=JPWn}271lRireVooq6x0i8;P6^;$!WD<8L)}Dtx8{V6f@5U z@~5Gj`*wpoL7V#~0@@Cg8=C$Si6X^^_*p$6o9_G_wQvlo$N_tjIa^;FqTOYNk`-dl zmkCq@U+uDvxkXvK7G`36q`kA|)oGk0_%m|Mrr!TeR#7v1#t#m{9w(9ZEZvFG&TiRe-gYTEFdmiAJ90Xo)^a@$p|nxfyA5_A6L#CM7J9`P^8(5Vpu;}8 zy{`XgN~6;QP$aN`k%;x|xep2e7=D0CCDK@Ok0aSLU?fxDR=orU$aX7Wj8gydEaGvL zWCm<sP94?7t|@xbSv-Z;dRirpcixpA-~ME&dw7S|g{P*E?>N?46ehS!p@h z^-6xDwMyeB|C$x3s=<+TlcN}3h7Nvlydc{6?hli*`fcU;tWW+^sDHceV;G)xygft+ z&AYu?2RFxV&36fUUw7FehNjDP9qWVQW%=!s^pf)+KOT(#JWTio6RdUZrQdh;?o4&7qlLW%c-MWC7{Spi(@`EVrL+hLuK$(OB! zHH7xzxvbx79n%ZPCM)OK2B>xB!40t9;6qd%2@2 zw^M8#$PCBen3{q8R_eH8iKCMc;6vxu&~+YkLUB16I=8+ zbj^F4eKgXQj53R`|01Vyahn9`oVnCEcD!sIs3MI9mex6KhUyV%bu}&BET^YoDZcTW zLvjvoM_A6d^B3s3v2mu=A`f0dN9B#Q=WbXhC?ok8JUIWXn?DAtAsPG)!h^I5DsT03#5Jv@wYAKY_kl4*5XP WGs3WNM)d;(Jc@E^&~Gxvf&T*?5v`U0 literal 0 HcmV?d00001 diff --git a/DevOps/Hashicorp-Vault/image-5.png b/DevOps/Hashicorp-Vault/image-5.png new file mode 100644 index 0000000000000000000000000000000000000000..0976dc063dc58bdd4a61d469ea21f4b1552cc1a7 GIT binary patch literal 7961 zcmch6WmH>D*ey^f6pFjMlmclR+%345K=C5Q-Cc^bSaB#4+%3gjTio4)Ymfq^fg=6V zm+$_(Yu#TrYgSgCb!N^v&&=M>-ZP2RP?N{Srou)+LBUm2kkvv#L6b%P_QgU&eor~9 z+@PS)Z79l0X?vrdK;SKvoX;al=nQIzaB2wPU$@46hz4Kos)mg?>I_plDEA#pr8J|E z-9A8a63|ByC!nIcL(sF(;NusZvpd@R)zVmIZhhs!T49n&I`!nU*{jTTjc=cJ;Kq0W zityr_MAx<}1coQfb{H{$!`jQvt)2uGyA-asX9O#6Y)^i;3Rr3Um3=JBZQU+#!UIe; zt_#mrV>CQYGWl{~k44t%?-R29TArFaL-z>Kw3Kd>O@Er~*K%1-k_8DHXiA!?tsYqg z%NrP#dozmQteSswC;0|32ux{mawqihJ2(QEzKh z&TStotfE~Jlfpdae9K%t54L{F1Gk;{QtV??q~Rm}rGNaT7gI4T#hR(ivxfePPcE*^ z@hf4{Zz)3v*NMGOcsT=0z&J~#yn2@2Wn-@i%!@@<-5{7#X! zx1c{4l%Wp^sk-?Gw2*|f@$F_h1!XeQWXw1gtlfyxC!e+l6^SjtD-CbpZQqr+;EWS4z;`Ruk{ zv>ILtE)A25Z3PPB6?8fh2WIjPV>BFv0r9256nqh7nF>AP{&E9oNGiR~ohRzZTPy7AIeRm%zm zQ(@k?=@6|UubMM=OTQ%0mY(mg9v9y>|7GP(abs7SQxUJVPr9r6zm!^ti$9r14ud*DL@Bv#s}`S%P}gfm zEA5RZsZnduDil-V{Lwb}@Mp0r94zb9gD&0hb~5@Rg}Nx!8;@#mFFX;RwxtSA@hgQ% zsW__OtflFGP$zYSOj?&H(H#wiAEqfs;4K`v+Sh4_d5PA{mOIiq0%W~e=K{PKSKGT^ zow&KV9A|R*9ndB)dqb_;H;v1pUUkz9mv77p zDTD-X9aY~O(W{709DJ3@APbN_$^hG~>+3a_>APCpXBOxAyIJ)^-zbb!-89^WYgMf* zHGPt5BmJPm%VW}JbMkr@b)P(olJewL%^S2I0rA%i?n|X!JeRZ&PhP7^;tyJod1a+) zvd@BvR`ZM#es_qGOpob#JL=nZl;e7S@m(|YtdLFQD~rt9PaU>zR}#}cs;F5{g|5C~ zEx~URq|-f&7!Vu$!282+=oGtq*a#OMJA5@e5WePEvd2G5oDI)0 z0^?sX^6}x%ayi*m=D5)5(fPU1Hr)=&c~r3;P#lZr3vK@DtmwrNXSOQJ+EW64=7D|>}2bx!>twn_`Vzq4KfeSBqV#aDD<^JbCFJ$aycft z&k_9Ya$3S$_K(^$50tBF5Tzs zzpUJOhllz1^vDNBTbGPUW8`Xy`MJv^Y~G9(wg%W9dvWSv>BLWd%CT-I{vG}PDBcihSaA1u^h%L4 z;X!<5ncj7V+=i{a0nE6al?d?(s9y$i=A8czi@@R~dH>DZ3e50(M#`)u`VGbxkKVK@2EXzcIZPu>S=NKPk~SM#T$g-eWv=rpM||zelA@{P>^o@qdac zSU16e`4085GbUOja0YODoucZa_v;24^}tB3;0r{3x%PXvF!`)`Sek^RCi^a2RXYm! z&lxqROKy!W>r-DO2v#v&N#$_CvR=zpK6{>XI3o{hs&qMr0hr*&8`%FIoy8*pwC(Iw zqG=qAycMtZ`t1ibnvg`8KfCsT^)Bb`1}Z0~^rSa@{Jkwg-Bfh7WA4)ZiU1|#jNQ2> zeah8hUeraWA|ORNR3SF|3%oODQhl$RRFkH7_m-RQX(*6d?q?@n^3@KzDbrhI+VqmS z?w0lC@LoTjBWa7@%^)4XIZjvkljy2#%pF2D7W6;0_Q$!$wbe0-c7^(fjaW^>b;?&i zv^TN-xj#G>4PhXqL5sL3qC>uWixoy__3=Pq0Kc0(jSIA zd1mNg*$z$j=I@%A9LKVyNL%qNTrC21!=I_Z<#|r{8S&yLGmwrq4ixNxg9lHvIeP{RLt;CQG|quaTN9Nqxb#)by3S|Pp9O_ZlrNH^b9x1MlJW) z5)F~Mt$FUmPe3SzwBZ|SXl1~*w@>p!|JS4&JnK&HAeBgdjA{NQffW`1ztGh|bGCHq z!{2?(Ssuv=k&jFk|I9rKR(lFc){?=wjL;(o2$A`I$;G04?CQjd0{Ubhe!U!+nuSsA{Dr@G8iOik;HKsc8zh+R1;fE9a2fXHX3al_jJivsQzHU zJ;pnBS?jnWH26AldkQvvDXi;>w-*oQHYv~+OH;9Y4Y}tr$oRDv8hPm_?v(nWB$Zc0 zT=j?-U=Ye~V-^LJ@;*3=qG7r&J@|Ai#Y7+&k4!4$RhQgseRE@qddA^Qt)4kQRAz)s zs{vgc&q!yz$wAr4ncY@Om9r>Q*QO};>wj)q-f$Bo(#(ByOplc8k!Kjkw%&EDQu1@1&E+lg~L0 zZ0MC8{1W#-Kq^oL(L>Z3H3aKs3Ik*obS51f+!U+T^}+#gD$DG7nEQppl9f}&*Zu-* z#FI#3A%*k2)v*$xtQ3*Dx3Hpnl0|y+Pkde?R`Z$l^A{qcHp~h$ah>N5B{lvWGctqD z!|%!y!p3?3yb-u9c=WC%;HJoYLCqb-<|sAuqW@!E?>e2YlG>c|#VnFvdR3t9r4G_9 zU=&a*u6}Bp>(@TXf)I>p$#t#r=!jmrl7z@8w)jK(Z`G1EP|(FgB{xSaWjtZ_bdb}r z(PO673^E7ChTR!?qA|j91cf$Q91Il{ndj+$?Q)_a!_# zV|T%^PB`=yI-W}PUjcZ01p%GSH0%<2%hLoy z9CDqR+Avty&Uh_R7VZjHME{|l@>Crg=T>;$3L(ea(RhfF7J6{E-?PH;n3D5dIyZ1@ z`Dj`%)WRvFIGm0uX3D?0E*FIJr+0|s>Hdq5fV#zejA@Z?isc8RzF`dE==gz54kQ4P zI!1D-&^lm^h8z=HPhZ!Cw5+d?Kmn`b92|zc*$GYSncARq< zR>d67C}`=xf=o*XH}VtHWKYE1_oGO5?d2ljRb%v@l|Hs0HhIIhNOSe4w9Tf!HuDg? zwMa;j0rFs}?oj=+DZ`n#Z(zrnX8g7^GF85cS5+W+a#EqrbeZRJW5BXxj^9e053bMN zVMoI?`;PODq?i&@v-Tv}Co%tLhd}x12&`n_`Up*>T&0Tq?n+teSsp^lnS2P}D z5|J#TcsVjbCGso8>WC!PVfOGM+(s@mtYCsAUZ_rRpm*YVJsZsl{tWrT21 ztv#F*KlNT#ne=qm09Xcy8R05!c$V|*7FcQPrq^3}Pb7p}LQGlb+%pncWICOZ8*X>l z|7XKQj2@#!6U!_1U3^jj{^$X>p9g?Q80mJt*Dk8n%9k^Cp-9(qc_vjBH_&*|-o2WS zQYD_U(xnG&w~QiF?u!MT0t> z&+nlc$Vs^)M(4D$6tnJf(z|Vavm`Mpzpxke=cG0VBcOtlnlIeZ<5+)WKeLUG%D#om zNT(!n$=!&n$KZL9loL6lcqqLgIHy5V_A#3@9tAxCFZ)a+Z8zl*ZBGk=P) z{3)5$UcQMwKTQ7nYvl2i6Tu*a5)j3S)6o(z!Z9&B7C2 z*Z7G>@eG#am&khT?P5?Pl(GVflv(bhysC9K?vFz#Wm_v%u~uKU5&s!NeX3PiNTc*u zrhA%i9slPhKU(x{Ab2y(d4<1R((d3Fi7(`IQn&0l!9Tv|gOD8y4N`>f@Iq$O^~gnr z4mvS@aVrPCXT*)fExqfsX1S6!PZA_eSUA=smQE_li<}~J&w({^Bvj(A&lwFu4{st0 zXlqh|aLyn1^}eZS?rv_T>wx_S>FauH#a4{nws>VAA2;OPkWV_d(t{u-WwU=`FvZb@Ezf zx$#kM&gM2)twN8UCG-9NF_xNSu zfZN_-tR$(8ICNJlxs#A%bN6D;N7^F&%v6b)a4PyW)643VXeu#1 zokdCi8$V*qkid_h$P5Il<)rS8+3ch-I?0nQGtM@miHvXmWhY-d^x%Qe4^Jg|9s#j zJgz;x-QURn%HUXF#i!&?QIG)4dR2sn_;LlmH*`Z45cfrY1zQ8kNiZgxT<6T`j zOQ#MGruDCR5fYlGsn5<9tsBZ1FKMPkxYa{@$tm|tCrCr1n33*Ymv|7eB+;CsXFX&7 z;(AZS_~rq4R=mtPeHdujCvLHdd!UTE-kh_FV3xr{Rx$Ae$)izgzN_iQdo6fdLM%4{ z&HT%G(1hY|+HrGh=e6GZ&0*L#F8mZ2=N)?qC8-JuM`rv`)=~XIpyidg1%G^7Y*%?d z>c0u1Q9$m0YQqQAbf+yfCwYullJ#|0=@Gll-+i8Q^JMAu|H=E7z~!NAsA;PSN40Tb zXY9ZU8l+%B`?sMPKnnV?$?C-Mmw<7)l6%t^p#a;)1d)}qm;HoE0fQe=1ncl$8h?F) z_Ln4NHT~ZFHeEAvg&NQpm)8CjFe0-2>rj0*VIzuH9=liYr?%a>?L&(cq4pb4*%nf> zk&6pu&=9KAJ&3^j4-lvXf?-G_%Sge9{#d#p|0F<>zV%T8@EDPB;kr@F6}zbQ8pKD% zWPF52jtmklOZ&OutdB7iDHXptrzf90Ze)3pa8Z}R>G{80)P+z6;lfh|6T#)fyVZ_w zNY@u(VTU#e)tBnS_h<8;^>46g0lRmQ7c9uhd=*kLUJ2+&JU8rWr@9Av({f)@1?lG; zSwmRPGGJB*VJgT;qi5F;1RBj8v{%*H%@*2q7&Hu~4y?~RY|F(XT9#A$=B4zvoOx_! zE$Q3NtW{#^J$BpF#441EL5n&wFF&f4$Ock>tY6I1)nb)-y6p^e_ZwC^|EDF~T{11~ zyRHrXFX=*!%ibDxpN1u}@6J`o7Gjz4cg7dObWIUu(@B*+msXKJ_6 zqv*wbxx(gJX&wNxzVQUZ6Y=(JNW3=8dpxv4pq_p96IwS|c02t&;V+6# zO_)c7ObhzHX~%Qg2adLGhgs$8Vh{Lz1Ot#8@b<^X+_A=yyCO9CqN{%AJwH2L*jqDmsQC&sxbDqAk=Nz^xRj~Es@E|JJUEb+Y3;e*)i^OPWoaEl9 zel(L?DDNK8{_I7QQw*5^O@WW%xpZ1do}7?-XQNGjBz@{<3UJ#rar5SoLBA-k-EtxL zVhN83C=5hnR5yOZXF|t+0Uhqx@?7O*4lQ)WhSkhxrU90=Z85>JCc2&%UG3NJ#j%2e z+2e)lOuYcvd`v+)YV_PInoN z^OpEah2f^cH=JL>6&DeV9jEUCCZ$)?0I^FJoqp@MOCtc>J`5!8otTmPs?b_O-{GJ% zA@_#AJOo4!avK{L_nEI1aFKNuK}rLF134H&))TgQSZK)nH1TaEN>OaI0EBd9;8yAyDK=TOLNyBeCff zkwU{9jUo5=Ki;YgGNjZ0jPqCo5|EWdy!PFDl7A&JxLXX}cyrVn%w+HlL3imG<)4{_QHaSx`w7Bj$t|+u0|4p$?agmX=VtS$Y;KEhl3YwDm*vNcW+e9J;F4#W> zVjq~h(Chi^;>shD!S+}-@p;Y3A3`s0U>Uc|_w}ljq%Jg*h$$6-UvbSwf#A7(vC@t9-0zmTx$Jq>bK83 z&If)ijK91Ad+V$FkEQEgNwY9>Lzx~NHy38FCmjo~I8`IMy$Ct7(mk3T=%MqOioX-E z*JzIHZCPh9zDc`j^qp;rRc9MXf4^sc;1cnS8GC33EU@bRoo=wt`8JPYyX5kOQ5z>4 zwn=(k^*~{={=>PHq`==Y4}xziZ4XCJ(x6=7MmI6hp-Zb%_ZQpM4?Y%*+`+uhCWT_8S6MoW%J96t zi6b8n{^kT@yhxobJ;3#qE3`kLSB+dw|Ii_80DrEj+=V$3;%|J^-1OaWZD)`2?L*uC zjku|(^|CcpJlV?Z`5;ENHjd}HI{5yuUFL-{rSps7$h$<#%(En1{GFo*gzcS?(I%ma zuyYzrdpQa;7eG0svs>D4laYmA(#a9zWHoy*jxF?J!YoKIF?GPpx7QRLRQ^-{0i&bM zmk6yt?AfO`fpH_%U@G3~yLt%Y-#*WRQeE96ABKpe5@M|JO2~%9e{e;?@@Ed25un1& geB^{=H}N&Saln@bGu60{D9Dc@NKLj{`u)fM0dPGbga7~l literal 0 HcmV?d00001 diff --git a/DevOps/Hashicorp-Vault/vault-with-ldap.md b/DevOps/Hashicorp-Vault/vault-with-ldap.md index 2a23107..4cfe768 100644 --- a/DevOps/Hashicorp-Vault/vault-with-ldap.md +++ b/DevOps/Hashicorp-Vault/vault-with-ldap.md @@ -46,7 +46,7 @@ vault policy write policyuser1 /home/vuser/policyUSER.hcl ``` ![alt text](image-1.png) -Создадим групповую политику +Создадим групповую политику с полным доступом ```bash nano policy_groupad_fullacess1.hcl @@ -63,4 +63,196 @@ vault policy write policy_groupad_fullacess1 /home/vuser/policy_groupad_fullaces ``` vault policy list vault policy read policy_groupad_fullacess1 -``` \ No newline at end of file +``` + +# Привяжем LDAP к AD +Идем и читаем *Auth Methods* https://developer.hashicorp.com/vault/docs/auth + +Без чтения дальше продолжать бессмысленно. Особенно внимательно читаем LDAP Auth Method +Включаем LDAP по руководству, раздел Configuration +``` +vault auth enable ldap +``` +Сначала настроим связку с AD – потому что сейчас в Vault пользователей нет. + +>Учитывать: пробелы и переносы строк значимы, если не поставите пробел перед закрывающим “\”, то получите проблемы. Учтите, в тестовой конфигурации пароль прописан в исполняемом файле в открытом виде, не забудьте потом удалить файл и историю. + +```bash +nano ad_auth_1.sh + +#!/bin/sh +vault write auth/ldap/config \ +url="ldap://192.168.32.155:389" \ +groupdn="OU=N Watch,OU=Zoo MSK,DC=contoso,DC=lab" \ +groupfilter="(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}}))" \ +userdn="OU=N Watch,OU=Zoo MSK,DC=contoso,DC=lab " \ +userattr=sAMAccountName \ +groupattr="memberOf" \ +insecure_tls=false \ +deny_null_bind=true \ +use_token_groups=true \ +starttls=false +``` +И выполняем +``` +sh ad_auth_1.sh +``` +теперь нам надо бы проверить что все работает и привязать юзеров к политикам. + +Проверим через GUI + +User- Ivanov, Password - Pa$$word3 + +Получаем ошибку: +``` +Authentication failed: 1 error occurred: * error connecting to host "ldap://192.168.32.155:389": LDAP Result Code 200 "Network Error": dial tcp 192.168.32.155:389: connect: connection refused +``` + +Посмотрим в CLI +``` +vault login -method=ldap username=Ivanov +``` +та же ошибка, а все почему? Потому что по невнимательности я прописал + +url="ldap://192.168.32.155:389" \ + +а AD у нас где? 192.168.31.151 + +и заодно, insecure_tls=false – а у нас ничего для TLS нет, так что читаем руководство еще раз, + +insecure_tls - (bool, optional) - If true, skips LDAP server SSL certificate verification - insecure, use with caution! + +**В БОЕВОЙ СРЕДЕ НЕ ЗАБЫВАЕМ СЕРТИФИКАТЫ AD!** + +И мы же не прописали самое главное – bindDN! + +Исправляемся, не зря в ldapsearch проверяли. Не забываем про “\”, кроме последней строки + +`binddn="CN=Vault connector,OU=Vault,OU=Robo base,DC=contoso,DC=lab " \` + +`bindpass="Pa!!word2"` + +Исправляем, выполняем + +``` +vault auth disable ldap +vault auth enable ldap +sh ad_auth_1.sh +``` +Учтите: + +1) При выполнении vault auth disable ldap – будут удалены не только настройки ldap, но и пользователи. У нас пока пользователей нет, а когда будут – попробуйте и увидите. + +2) При каждой удачной команде vault login(и так далее) – вы будете получать новый токен. Поэтому лучше бы держать две SSH сессии – одну с vault login и root token, а вторую для проверок. Я в тексте не пишу про переключение, потому что по лени ввожу vault login каждый раз. + +*Проверяем* + +`vault login -method=ldap username=Ivanov` +Получаем годное красивое + +Error authenticating: Error making API request. + +URL: PUT http://192.168.31.155:8200/v1/auth/ldap/login/Ivanov + +Code: 400. Errors: + +* ldap operation failed: failed to bind as user + +![alt text](image-2.png) + +И если вы на этом этапе подумали – «Ну что ж, заведем юзера в Vault!» - то вовсе не угадали. + +Надо идти в логи AD и смотреть там ошибки авторизации – у какого юзера не идет авторизация. В моем случае – с Source Network Address: 192.168.31.155 прошла успешная авторизация пользователя CONTOSO\VaultSAM + +Может быть, проблема в пароле товарища Иванова? Проверим. Сменим Pa$$word3 на Pa!!word3 –а вот и нет. + +Но у нас есть товарищ Волк, без имени и фамилии. Проверим! + +vault login -method=ldap username=volk + +и все работает! + +![alt text](image-3.png) + + +# Заводим MS AD юзеров в Vault LDAP +Не забудем перейти в соседнюю сессию или перелогинимся +``` +vault login +``` +Юзер у нас ходит, а политик ему не назначили – так заведем. + +``` +vault write auth/ldap/users/Ivanov +``` +и получим ошибку, Must supply data or use –force + +Заведем сразу с политикой - + +``` +vault write auth/ldap/users/Ivanov policies=policyuser1 +vault login -method=ldap username=Ivanov +``` +работает, отлично – политика и токен["default" "policyuser1"],а как с группой быть? + +В конфиге я считерил и сразу прописал + +`groupfilter="(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}}))` + +В конфиге я считерил и сразу прописал + +`groupfilter="(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}}))" \` + +это известное читерство, описанное тут Поиск всех групп пользователя AD по протоколу LDAP, и случайно мне попавшееся в обсуждении на hashicorp + +и в google groups ,да и в документации в разделе Group Membership Resolution, но как-то совсем косо, с первого второго и далее раза не очевидно. + +**Проверим**: + +``` +vault login -method=ldap username=Petrov +``` +теперь логинится, и получает политику ["default"] + +Пропишем группу AD + +``` +vault login +vault policy list +vault write auth/ldap/groups/VltADM policies=policy_groupad_fullacess1 +vault login -method=ldap username=Petrov +``` +и получим что: Верно. Индейскую народную национальную избу мы получим. Логин есть – политики нет. + +``` +vault list auth/ldap/groups +vault delete auth/ldap/groups/VltADM +vault write "auth/ldap/groups/Vault login" policies=policy_groupad_fullacess1 +vault login -method=ldap username=Petrov +["default" "policy_groupad_fullacess1"] +``` +**Теперь про неприятное.** + +Удалим пользователя Иванова без очистки токенов. + +`vault delete auth/ldap/users/Ivanov` + +зайдем им + +`vault login -method=ldap username=Ivanov` + +ОП – и у нас по прежнему есть старая политика. Для сброса придется в обязательном порядке отзывать токены – + +Получить список токенов + +`vault list auth/token/accessors` + +![alt text](image-4.png) + +Перебрать каждый + +`vault token lookup -accessor EHlDQ1tFHEgA9aq0R6IptIjo` + +![alt text](image-5.png) + +и так по всем. Не самая удобная процедура с точки зрения CLI, ну так Vault не под CLI заточен. \ No newline at end of file