Shan Desai shantanoo-desai

Trials with Secretstores JOSE in Telegraf using Docker

generate secret

docker run -u 1000  \
          -v $(pwd)/telegraf.toml:/etc/telegraf/telegraf.conf:ro \
          -v $(pwd):/etc/telegraf \
          telegraf:latest telegraf secrets set jose_test opcua_password testpassword

From Docker Container to Bootable Disk Images but with Packer

Source based on Blog Post @iximiuz (Ivan Velichko)

Putting it together

Create the Filesystem Tarball with Kernel and SystemD

	# Docker Init Container
	# Alpine Container that changes the File Permissions and Ownership
	# of the mounted configuration files
	# NOTE: WILL ALWAYS BE EXECUTED BEFORE THE MAIN MOSQUITTO CONTAINER
	# NOTE: WILL ALSO PERMANENTLY CHANGE THE FILE PERMISSIONS/OWNERSHIP ON HOST
	services:
	mosquitto_init:
	image: docker.io/alpine:3.18
	container_name: mosquitto_init
	command: sh -c "chmod 0400 -R /config/ && chown -R 1883:1883 /config/"

	package main

	import (
	"crypto/md5"
	"fmt"
	"math"
	"sort"
	"strconv"
	"sync"
	"time"

	---
	- hosts: localhost
	gather_facts: false
	tasks:
	- name: test upload flow to nodered
	nodered_flow:
	nodered_url: http://localhost/nodered
	nodered_user: admin
	nodered_password: testnodered
	path: "{{ playbook_dir}}/flows_test.json"

	INFLUXDBV2_ADMIN_USERNAME=admin
	INFLUXDBV2_ADMIN_PASSWORD=testInfluxDB
	INFLUXDBV2_ADMIN_TOKEN=testtoken
	DOCKER_INFLUXDB_INIT_ORG=komponistorg
	DOCKER_INFLUXDB_INIT_BUCKET=komponistdb
	DOCKER_INFLUXDB_INIT_RETENTION=7d

	TELEGRAF_MQTT_USERNAME=admin
	TELEGRAF_MQTT_PASSWORD=test

	include: '.gitlab-ci-config.yml'

	stages:
	- single_test

	{% for testcase in tests %}
	test_{{ testcase.number }}:
	extends:
	- .test
	script:

	- hosts: all
	gather_facts: false
	vars_files:
	- defaults/main.yml
	- vault.yml

	tasks:
	- name: Do Not Execute Playbook if No Flows File extra variable is mentioned
	fail:
	msg: >

	OPCUA_USER=user1
	OPCUA_PASSWORD=supersecretstuff

	---
	- hosts: 127.0.0.1
	connection: local
	roles:
	- appstack