/strongdm_cookbook

Primary LanguageRubyApache License 2.0Apache-2.0

strongdm cookbook

Cookbook Version Build Status

Description

This cookbook fetches the strongDM client into the Chef file cache, for use during a Chef run. It includes recipes for gateways and SSH servers to self-register.

Recipes

default

Fetches the sdm client from strongDM and puts it into the Chef file cache. Also, creates a strongdm local user for use by other recipes.

gateway

Automatically registers a host as a strongDM gateway relay. This requires the user to provide an admin token which has the following permissions:

  • relay:create

NOTE: The installation requires SELinux to be disabled. This is done outside this cookbook.

server

Automatically registers a host as a strongDM server relay. This requires the user to provide an admin token which has the following permissions:

  • datasource:create
  • datasource:grant
  • datasource:list
  • role:list